Vulnerability in Oracle Oracle9i

CVE-2003-1208

Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVA…

EPSS: 0.132 (95.9th percentile) — read the EPSS interpretation.

Affected products

  • Oracle Oracle9i — versions enterprise_9.0.1, enterprise_9.2.0, enterprise_9.2.0.1
  • N/a — versions n/a

References

  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_OSVDB, Exploit, Patch, vdb-entry, Vendor Advisory)
  • cve@mitre.org (Patch, government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
  • cve@mitre.org (Exploit, Patch, x_refsource_SECUNIA, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_OSVDB, Exploit, Patch, vdb-entry, Vendor Advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)