high7.5
CVE-2002-0567
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by usin…
Impact
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | Versions 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.5.1 |
| Oracle | Oracle8i | Versions 8.1.5, 8.1.6, 8.1.7, 8.1.7.1, enterprise_8.0.5.0.0, enterprise_8.0.6.0.0 |
| Oracle | Oracle9i | Versions 9.0, 9.0.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=101301332402079&w=2
- http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf
- http://www.cert.org/advisories/CA-2002-08.html
- http://www.kb.cert.org/vuls/id/180147
- http://www.securityfocus.com/bid/4033
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8089
- http://marc.info/?l=bugtraq&m=101301332402079&w=2
- http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf
- http://www.cert.org/advisories/CA-2002-08.html
- http://www.kb.cert.org/vuls/id/180147
- http://www.securityfocus.com/bid/4033
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8089