Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Remediation

References

CVE-2003-0222

Related Vulnerabilities

WordPress Plugin Roomcloud Multiple Cross-Site Scripting Vulnerabilities (1.1)

WordPress Plugin WP Support Plus Responsive Ticket System PHP Object Injection (9.0.3)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487)

Cherokee Improper Authentication Vulnerability (CVE-2014-4668)

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (3.0.5)

Severity

Critical

Classification

CVE-2003-0222 CWE-119

Tags

Missing Update Known Vulnerabilities