Description
Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.
References
- 19712 third-party-advisory
- 19859 third-party-advisory
- VU#797465 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
- ADV-2006-1571 vdb-entry
- 17590 vdb-entry
- SSRT061148 vendor-advisory
- oracle-dbmssnapshotutl-bo(26049) vdb-entry
- http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html
- 20060420 [Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure mailing-list
- TA06-109A third-party-advisory
- http://www.argeniss.com/research/ARGENISS-ADV-040603.txt
- ADV-2006-1397 vdb-entry
- 1015961 vdb-entry