Description
Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via the GET_PROPERTY function in SYS.DBMS_DRS, aka DB03.
References
- 23794 third-party-advisory
- 20070718 Oracle Database Buffer overflow vulnerabilities in procedure DBMS_DRS.GET_PROPERTY (DB03) mailing-list
- 22083 vdb-entry
- 20070124 Oracle Buffer Overflow in DBMS_DRS.GET_PROPERTY mailing-list
- 32909 vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- TA07-017A third-party-advisory
- http://www.appsecinc.com/resources/alerts/oracle/2007-04.shtml
- oracle-cpu-jan2007(31541) vdb-entry
- 1017522 vdb-entry