← Back

CVE-2004-1363

nvd nist
Published: Aug 4, 2004Modified: Apr 16, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Affected (33)

Oracle
7 products
Application Server
Collaboration Suite
Database Server
E Business Suite
Enterprise Manager
Enterprise Manager Database Control
Enterprise Manager Grid Control
Configuration A
33 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Application Server
All versions
Application Server
Version 9.0.2.0.0
Application Server
Version 9.0.2.0.1
Application Server
Version 9.0.2.1
Application Server
Version 9.0.2.2
Application Server
Version 9.0.2.3
Application Server
Version 9.0.2
Application Server
Version 9.0.3.1
Application Server
Version 9.0.3
Application Server
Version 9.0.4.0
Application Server
Version 9.0.4.1
Application Server
Version 9.0.4
Collaboration Suite
All versions
Oracle
Database Server
Version 10.1.0.2
Database Server
Version 8.1.7.4
Database Server
Version 9.0.1.4
Database Server
Version 9.0.1.5
Database Server
Version 9.0.4
Database Server
Version 9.2.0.4
Database Server
Version 9.2.0.5
Oracle
E Business Suite
Version 11.5.1
E Business Suite
Version 11.5.2
E Business Suite
Version 11.5.3
E Business Suite
Version 11.5.4
E Business Suite
Version 11.5.5
E Business Suite
Version 11.5.6
E Business Suite
Version 11.5.7
E Business Suite
Version 11.5.8
E Business Suite
Version 11.5.9
Oracle
Enterprise Manager
Version 9.0.1
Enterprise Manager
Version 9
Enterprise Manager Database Control
Version 10.1.2
Enterprise Manager Grid Control
Version 10.1.0.2

Related CWEs

CWE-131
Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

References (16)

Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Broken LinkPatchVendor Advisory
Source: cve@mitre.org
Broken LinkPatchVendor Advisory
Source: cve@mitre.org
Broken LinkPatchThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken LinkPatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.