Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Remediation

References

CVE-2003-0222

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-25763)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23702)

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-21338)

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8166)

Jenkins Incorrect Authorization Vulnerability (CVE-2023-27899)

Severity

Critical

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2003-0222