Description
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
References
- CA-2002-08 third-party-advisory
- 20020206 Remote Compromise in Oracle 9i Database Server mailing-list
- http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf
- 4033 vdb-entry
- oracle-plsql-remote-access(8089) vdb-entry
- VU#180147 third-party-advisory