CVE-2004-1363

CRITICAL

9.8

Description

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/4/2004

Derniere modification4/16/2026

Sourcenvd

Observations honeypot0

Produits affectes

oracle:application_serveroracle:collaboration_suiteoracle:database_serveroracle:e-business_suiteoracle:enterprise_manageroracle:enterprise_manager_database_controloracle:enterprise_manager_grid_control

Faiblesses (CWE)

CWE-131

References

http://marc.info/?l=bugtraq&m=110382345829397&w=2(cve@mitre.org)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1(cve@mitre.org)

http://www.kb.cert.org/vuls/id/316206(cve@mitre.org)

http://www.ngssoftware.com/advisories/oracle23122004.txt(cve@mitre.org)

http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/10871(cve@mitre.org)

http://www.us-cert.gov/cas/techalerts/TA04-245A.html(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/18659(cve@mitre.org)

http://marc.info/?l=bugtraq&m=110382345829397&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/316206(af854a3a-2127-422b-91ae-364da2661108)

http://www.ngssoftware.com/advisories/oracle23122004.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/10871(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA04-245A.html(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/18659(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.