Description
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
References
- http://www.ngssoftware.com/advisories/oracle23122004J.txt
- 20041223 Oracle wrapped procedure overflow (#NISR2122004J) mailing-list
- VU#316206 third-party-advisory
- TA04-245A third-party-advisory
- oracle-wrapped-procedure-bo(18666) vdb-entry
- 10871 vdb-entry
- http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
- 101782 vendor-advisory