CVE-2003-0894 - Vulnerability Details - OpenCVE

Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Oracle	Oracle9i

Configuration 1 [-]

OR	cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:::::::*
	cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:::::::*
	cpe:2.3:a:oracle:oracle9i:personal_9.0.1:::::::*
	cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0.1:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.0.2:::::::*
	cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:::::::*

No data.

References

Link	Providers
http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf
http://securitytracker.com/id?1007956
http://www.kb.cert.org/vuls/id/496340
http://www.securityfocus.com/bid/8844
http://www.securityfocus.com/bid/8845
https://exchange.xforce.ibmcloud.com/vulnerabilities/13451

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2003-10-25T04:00:00

Updated: 2024-08-08T02:05:12.817Z

Reserved: 2003-10-24T00:00:00

Link: CVE-2003-0894

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2003-11-17T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2003-0894

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2003-10-18T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "8844", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/8844"}, {"name": "8845", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/8845"}, {"name": "VU#496340", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/496340"}, {"name": "oracle-oracleo-binaries-bo(13451)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13451"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf"}, {"name": "1007956", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1007956"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-0894", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "8844", "refsource": "BID", "url": "http://www.securityfocus.com/bid/8844"}, {"name": "8845", "refsource": "BID", "url": "http://www.securityfocus.com/bid/8845"}, {"name": "VU#496340", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/496340"}, {"name": "oracle-oracleo-binaries-bo(13451)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13451"}, {"name": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf", "refsource": "CONFIRM", "url": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf"}, {"name": "1007956", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1007956"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T02:05:12.817Z"}, "title": "CVE Program Container", "references": [{"name": "8844", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/8844"}, {"name": "8845", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/8845"}, {"name": "VU#496340", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/496340"}, {"name": "oracle-oracleo-binaries-bo(13451)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13451"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf"}, {"name": "1007956", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1007956"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-0894", "datePublished": "2003-10-25T04:00:00", "dateReserved": "2003-10-24T00:00:00", "dateUpdated": "2024-08-08T02:05:12.817Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2201796B-013B-4440-B366-1F2966AA86FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "2FB739C3-A9BD-433F-8547-12BC615DB18D", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "58DB0B6B-EB97-448A-B63E-E5997382DD45", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D0DE0FB4-3C1A-460D-B48E-11D7AF415A94", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*", "matchCriteriaId": "6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "D65D66A0-23F7-4110-AF71-05CBFB3F92F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "F207CBC6-D186-418D-8F11-3E623530E00B", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "2FB2708A-58D1-4F17-8504-3748D6667788", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "34FC1E19-8F20-4215-8D90-E42EF7126BD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "7F64908D-FDAA-499B-8060-8A6EC2443418", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en oracle y oracleO en Oracle 9i Database 9.0.x y 9.2.x anteriores a 9.2.0.4 permite a usuarios locales ejecutar c\u00f3digo arbitrario mediante un argumento de l\u00ednea de comandos muy grande."}], "id": "CVE-2003-0894", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-11-17T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1007956"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/496340"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/8844"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/8845"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13451"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1007956"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/496340"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/8844"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/8845"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13451"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}