← Back

CVE-2003-0222

nvd nist
Published: May 12, 2003Modified: Apr 16, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Affected (31)

3 products
Database Server
Oracle8i
Oracle9i
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 7.3.3
Version 7.3.4
Version 8.0.1
Version 8.0.2
Version 8.0.3
Version 8.0.4
Version 8.0.5.1
Version 8.0.5
Version 8.0.6
Version 8.1.5
Version 8.1.6
Version 8.1.7
Version 9.2.1
Version 9.2.2
Oracle
Version 8.0.6.3
Version 8.0.6
Version 8.0x
Version 8.1.5
Version 8.1.6
Version 8.1.7.1
Version 8.1.7.4
Version 8.1.7
Version 8.1x
Oracle
Version 9.0.1.2
Version 9.0.1.3
Version 9.0.1.4
Version 9.0.1
Version 9.0.2
Version 9.0
Version 9.2.0.1
Version 9.2.0.2

References (12)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.