Description
Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05.
References
- 23794 third-party-advisory
- 22083 vdb-entry
- 32911 vdb-entry
- 20070124 Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD mailing-list
- http://www.appsecinc.com/resources/alerts/oracle/2007-05.shtml
- 20070718 Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD (DB12) mailing-list
- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- TA07-017A third-party-advisory
- oracle-cpu-jan2007(31541) vdb-entry
- 1017522 vdb-entry