Unscored CVE-2002-1264 EUVD-2002-1248GHSA-88qq-cpf5-5jr8

Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.

References

http://technet.oracle.com/deploy/security/pdf/2002alert46rev1.pdf
20021104 Oracle iSQL*Plus buffer overflow vulnerability (#NISR04112002) mailing-list
oracle-isqlplus-userid-bo(10524) vdb-entry
20021104 Oracle iSQL*Plus buffer overflow vulnerability (#NISR04112002) mailing-list
4013 vdb-entry
6085 vdb-entry