Description
Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.
References
- http://otn.oracle.com/deploy/security/pdf/2003alert57.pdf
- 20030725 question about oracle advisory mailing-list
- 8267 vdb-entry
- oracle-extproc-bo(12721) vdb-entry
- 20030912 Update to the Oracle EXTPROC advisory mailing-list
- 20030725 Oracle Extproc Buffer Overflow (#NISR25072003) mailing-list
- VU#936868 third-party-advisory
- 20030725 Oracle Extproc Buffer Overflow (#NISR25072003) mailing-list