NetSight
IP …
critical9.8

CVE-2004-1363

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded af…

Impact

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Affected products

VendorProductAffected versions
OracleApplication Server
All versions
Versions 9.0.2, 9.0.2.0.0, 9.0.2.0.1, 9.0.2.1, 9.0.2.2
OracleCollaboration Suite
All versions
OracleDatabase Server
Versions 8.1.7.4, 9.0.1.4, 9.0.1.5, 9.0.4, 9.2.0.4, 9.2.0.5
OracleE-Business Suite
Versions 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6
OracleEnterprise Manager
Versions 9, 9.0.1
OracleEnterprise Manager Database Control
Version 10.1.2
OracleEnterprise Manager Grid Control
Version 10.1.0.2

Weakness classification

CWE-131

References