Description
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
References
- oracle-reports-server-bo(9289) vdb-entry
- VU#997403 third-party-advisory
- http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf
- 20020612 Oracle Reports Server Buffer Overflow (#NISR12062002B) mailing-list
- http://www.nextgenss.com/vna/ora-reports.txt
- 20020612 [VulnWatch] Oracle Reports Server Buffer Overflow (#NISR12062002B) mailing-list
- 4848 vdb-entry