| Vulnerability Name: | CVE-2004-0638 (CCN-17254) | ||||||||
| Assigned: | 2004-09-01 | ||||||||
| Published: | 2004-09-01 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 8.5 High (CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Sun Sep 05 2004 - 15:38:46 CDT Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i Source: FULLDISC Type: Patch, Vendor Advisory 20040905 Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i Source: MITRE Type: CNA CVE-2004-0638 Source: CCN Type: iDEFENSE Security Advisory 09.02.04 Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability Source: CCN Type: SHATTER Team Security Alert #22 Buffer overflow on DATAFILE parameter Source: CCN Type: CIAC Information Bulletin 0-209 Oracle Database Server Vulnerabilities Source: IDEFENSE Type: Patch, Vendor Advisory 20040902 Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability Source: CCN Type: US-CERT VU#170830 Oracle Enterprise Manager contains several vulnerabilities Source: CCN Type: Oracle Security Alert #68 This security alert addresses security vulnerabilities in Oracles server products. Source: CONFIRM Type: Vendor Advisory http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf Source: CCN Type: OSVDB ID: 9817 Oracle Database Server dbms_system.ksdwrt() Function Remote Overflow Source: MISC Type: Patch, Vendor Advisory http://www.red-database-security.com/advisory/advisory_20040903_3.htm Source: CCN Type: BID-10871 Oracle Multiple Unspecified Vulnerabilities Source: BID Type: Patch 11100 Source: CCN Type: BID-11100 Oracle Database Server dbms_system.ksdwrt Remote Buffer Overflow Vulnerability Source: XF Type: UNKNOWN oracle-dbmssystem-bo(17254) Source: XF Type: UNKNOWN oracle-dbmssystem-bo(17254) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||