Oracle Boundary Error in Handling CREATE DATABASE LINK
Publish date: 21 de julio de 2015
Gravedad: High
Identificadores de CVE : CVE-2003-0222
Fecha recomendada: 21 de julio de 2015
Descripción
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1000304
Trend Micro Deep Security DPI Rule Name: 1000304 - Oracle Database Server Buffer Overflow In CREATE DATABASE LINK
Software y versión afectados
- Oracle Oracle7 7.3.3
- Oracle Oracle7 7.3.4
- Oracle Oracle8 8.0.1
- Oracle Oracle8 8.0.2
- Oracle Oracle8 8.0.3
- Oracle Oracle8 8.0.4
- Oracle Oracle8 8.0.5
- Oracle Oracle8 8.0.6
- Oracle Oracle8 8.0.5.1
- Oracle Oracle8 8.1.5
- Oracle Oracle8 8.1.6
- Oracle Oracle8 8.1.7
- Oracle Oracle8i 8.0.6
- Oracle Oracle8i 8.0.6.3
- Oracle Oracle8i 8.0x
- Oracle Oracle8i 8.1.5
- Oracle Oracle8i 8.1.6
- Oracle Oracle8i 8.1.7
- Oracle Oracle8i 8.1.7.1
- Oracle Oracle8i 8.1.7.4
- Oracle Oracle8i 8.1x
- Oracle Oracle9i 9.0
- Oracle Oracle9i 9.0.1
- Oracle Oracle9i 9.0.1.2
- Oracle Oracle9i 9.0.1.3
- Oracle Oracle9i 9.0.1.4
- Oracle Oracle9i 9.0.2
- Oracle Oracle9i 9.2.0.1
- Oracle Oracle9i 9.2.0.2
- Oracle Oracle9i Release 2 9.2.1
- Oracle Oracle9i Release 2 9.2.2