A remotely exploitable buffer overflow vulnerability exists in Oracle9i Database.
A remote attacker may be able to overwrite a buffer, resulting in the ability to execute arbitrary code with the privileges of the vulnerable process. This process typically runs as "Oracle" on Linux and UNIX hosts and as "Local System" on Windows systems.
This vulnerability was discovered by Mark Litchfield (email@example.com) of Next Generation Security Software Ltd . The CERT/CC thanks both Next Generation Security Software Ltd and Oracle for providing information upon which this document is based.
This document was written by Ian A Finlay.
|Date First Published:||2003-02-18|
|Date Last Updated:||2003-02-19 15:36 UTC|