CVE-2004-1363

Description

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

oracle / application_server
oracle / application_server9.0.2 – 9.0.2
oracle / application_server9.0.2.0.0 – 9.0.2.0.0
oracle / application_server9.0.2.0.1 – 9.0.2.0.1
oracle / application_server9.0.2.1 – 9.0.2.1
oracle / application_server9.0.2.2 – 9.0.2.2
oracle / application_server9.0.2.3 – 9.0.2.3
oracle / application_server9.0.3 – 9.0.3
oracle / application_server9.0.3.1 – 9.0.3.1
oracle / application_server9.0.4 – 9.0.4
oracle / application_server9.0.4.0 – 9.0.4.0
oracle / application_server9.0.4.1 – 9.0.4.1
oracle / collaboration_suite
oracle / database_server8.1.7.4 – 8.1.7.4
oracle / database_server9.0.1.4 – 9.0.1.4
oracle / database_server9.0.1.5 – 9.0.1.5
oracle / database_server9.0.4 – 9.0.4
oracle / database_server9.2.0.4 – 9.2.0.4
oracle / database_server9.2.0.5 – 9.2.0.5
oracle / database_server10.1.0.2 – 10.1.0.2
oracle / e-business_suite11.5.1 – 11.5.1
oracle / e-business_suite11.5.2 – 11.5.2
oracle / e-business_suite11.5.3 – 11.5.3
oracle / e-business_suite11.5.4 – 11.5.4
oracle / e-business_suite11.5.5 – 11.5.5
oracle / e-business_suite11.5.6 – 11.5.6
oracle / e-business_suite11.5.7 – 11.5.7
oracle / e-business_suite11.5.8 – 11.5.8
oracle / e-business_suite11.5.9 – 11.5.9
oracle / enterprise_manager9 – 9
oracle / enterprise_manager9.0.1 – 9.0.1
oracle / enterprise_manager_database_control10.1.2 – 10.1.2
oracle / enterprise_manager_grid_control10.1.0.2 – 10.1.0.2

Description

CVSS breakdown

Affected products

References