Description
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Remediation
References
Related Vulnerabilities
Drupal Core 4.5.x Cross-Site Scripting (4.5.0 - 4.5.1)
WebLogic CVE-2008-2579 Vulnerability (CVE-2008-2579)
Envoy Proxy Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-9901)
WordPress Plugin Cherry Services List Information Disclosure (1.4.1)
Apache Traffic Server Memory Disclosure Vulnerability (CVE-2020-17508)