CVE-2003-0894

Published: Nov 17, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.

Affected (11)

Products: Oracle: Oracle9i

Oracle

1 product

Oracle9i

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Oracle Oracle9i	Version enterprise_9.0.1
Oracle Oracle9i	Version enterprise_9.2.0.4
Oracle Oracle9i	Version personal_9.0.1
Oracle Oracle9i	Version personal_9.2.0.4
Oracle Oracle9i	Version standard_9.0.1.2
Oracle Oracle9i	Version standard_9.0.1.3
Oracle Oracle9i	Version standard_9.0.1.4
Oracle Oracle9i	Version standard_9.0.1
Oracle Oracle9i	Version standard_9.0.2
Oracle Oracle9i	Version standard_9.0
Oracle Oracle9i	Version standard_9.2.0.4