Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Remediation

References

CVE-2003-0222

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2008-7068)

Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-12171)

Magento Insufficient Session Expiration Vulnerability (CVE-2021-21032)

Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-35652)

WordPress Plugin WP-Cumulus 'tagcloud.swf' Cross-Site Scripting (1.22)

Severity

Critical

Classification

CVE-2003-0222 CWE-119

Tags

Missing Update Known Vulnerabilities