Description
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
References
- 20030429 Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) mailing-list
- N-085 third-party-advisory government-resource
- oracle-database-link-bo(11885) vdb-entry
- http://otn.oracle.com/deploy/security/pdf/2003alert54.pdf
- 20030429 Oracle Database Server Buffer Overflow Vulnerability (#NISR29042003) mailing-list
- 7453 vdb-entry