CVE-2004-1371

EPSS 10.77%
Veröffentlicht 04.08.2004 04:00:00
Zuletzt bearbeitet 16.06.2026 22:07:34
Erkennungen
Login

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

NVD 88 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Application Server

Oracle ≫ Application Server Version 9.0.2

Oracle ≫ Application Server Version 9.0.2.0.0

Oracle ≫ Application Server Version 9.0.2.0.1

Oracle ≫ Application Server Version 9.0.2.1

Oracle ≫ Application Server Version 9.0.2.2

Oracle ≫ Application Server Version 9.0.2.3

Oracle ≫ Application Server Version 9.0.3

Oracle ≫ Application Server Version 9.0.3.1

Oracle ≫ Application Server Version 9.0.4

Oracle ≫ Application Server Version 9.0.4.0

Oracle ≫ Application Server Version 9.0.4.1

Oracle ≫ Collaboration Suite Version release_1

Oracle ≫ Database Server Version 9i_application_server

Oracle ≫ E-business Suite Version 11.5.1

Oracle ≫ E-business Suite Version 11.5.2

Oracle ≫ E-business Suite Version 11.5.3

Oracle ≫ E-business Suite Version 11.5.4

Oracle ≫ E-business Suite Version 11.5.5

Oracle ≫ E-business Suite Version 11.5.6

Oracle ≫ E-business Suite Version 11.5.7

Oracle ≫ E-business Suite Version 11.5.8

Oracle ≫ E-business Suite Version 11.5.9

Oracle ≫ Enterprise Manager Version 9

Oracle ≫ Enterprise Manager Version 9.0.1

Oracle ≫ Enterprise Manager Database Control Version 10.1.2

Oracle ≫ Enterprise Manager Grid Control Version 10.1.0.2

Oracle ≫ Oracle10g Version enterprise_9.0.4_.0

Oracle ≫ Oracle10g Version enterprise_10.1.0.2

Oracle ≫ Oracle10g Version personal_9.0.4_.0

Oracle ≫ Oracle10g Version personal_10.1_.0.2

Oracle ≫ Oracle10g Version standard_9.0.4_.0

Oracle ≫ Oracle10g Version standard_10.1_.0.2

Oracle ≫ Oracle8i Version enterprise_8.0.5_.0.0

Oracle ≫ Oracle8i Version enterprise_8.0.6_.0.0

Oracle ≫ Oracle8i Version enterprise_8.0.6_.0.1

Oracle ≫ Oracle8i Version enterprise_8.1.5_.0.0

Oracle ≫ Oracle8i Version enterprise_8.1.5_.0.2

Oracle ≫ Oracle8i Version enterprise_8.1.5_.1.0

Oracle ≫ Oracle8i Version enterprise_8.1.6_.0.0

Oracle ≫ Oracle8i Version enterprise_8.1.6_.1.0

Oracle ≫ Oracle8i Version enterprise_8.1.7_.0.0

Oracle ≫ Oracle8i Version enterprise_8.1.7_.1.0

Oracle ≫ Oracle8i Version enterprise_8.1.7_.4

Oracle ≫ Oracle8i Version standard_8.0.6

Oracle ≫ Oracle8i Version standard_8.0.6_.3

Oracle ≫ Oracle8i Version standard_8.1.5

Oracle ≫ Oracle8i Version standard_8.1.6

Oracle ≫ Oracle8i Version standard_8.1.7

Oracle ≫ Oracle8i Version standard_8.1.7_.0.0

Oracle ≫ Oracle8i Version standard_8.1.7_.1

Oracle ≫ Oracle8i Version standard_8.1.7_.4

Oracle ≫ Oracle9i Version client_9.2.0.1

Oracle ≫ Oracle9i Version client_9.2.0.2

Oracle ≫ Oracle9i Version enterprise_8.1.7

Oracle ≫ Oracle9i Version enterprise_9.0.1

Oracle ≫ Oracle9i Version enterprise_9.0.1.4

Oracle ≫ Oracle9i Version enterprise_9.0.1.5

Oracle ≫ Oracle9i Version enterprise_9.2.0

Oracle ≫ Oracle9i Version enterprise_9.2.0.1

Oracle ≫ Oracle9i Version enterprise_9.2.0.2

Oracle ≫ Oracle9i Version enterprise_9.2.0.3

Oracle ≫ Oracle9i Version enterprise_9.2.0.4

Oracle ≫ Oracle9i Version enterprise_9.2.0.5

Oracle ≫ Oracle9i Version personal_8.1.7

Oracle ≫ Oracle9i Version personal_9.0.1

Oracle ≫ Oracle9i Version personal_9.0.1.4

Oracle ≫ Oracle9i Version personal_9.0.1.5

Oracle ≫ Oracle9i Version personal_9.2

Oracle ≫ Oracle9i Version personal_9.2.0.1

Oracle ≫ Oracle9i Version personal_9.2.0.2

Oracle ≫ Oracle9i Version personal_9.2.0.3

Oracle ≫ Oracle9i Version personal_9.2.0.4

Oracle ≫ Oracle9i Version personal_9.2.0.5

Oracle ≫ Oracle9i Version standard_8.1.7

Oracle ≫ Oracle9i Version standard_9.0

Oracle ≫ Oracle9i Version standard_9.0.1

Oracle ≫ Oracle9i Version standard_9.0.1.2

Oracle ≫ Oracle9i Version standard_9.0.1.3

Oracle ≫ Oracle9i Version standard_9.0.1.4

Oracle ≫ Oracle9i Version standard_9.0.1.5

Oracle ≫ Oracle9i Version standard_9.0.2

Oracle ≫ Oracle9i Version standard_9.2

Oracle ≫ Oracle9i Version standard_9.2.0.1

Oracle ≫ Oracle9i Version standard_9.2.0.2

Oracle ≫ Oracle9i Version standard_9.2.0.3

Oracle ≫ Oracle9i Version standard_9.2.0.4

Oracle ≫ Oracle9i Version standard_9.2.0.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.77%	0.953

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1

http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf

Patch

Vendor Advisory

http://www.securityfocus.com/bid/10871

Patch

http://www.us-cert.gov/cas/techalerts/TA04-245A.html

Patch

Third Party Advisory

US Government Resource

http://www.kb.cert.org/vuls/id/316206

US Government Resource

http://marc.info/?l=bugtraq&m=110382570313035&w=2

http://www.ngssoftware.com/advisories/oracle23122004J.txt

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18666

https://nvd.nist.gov/vuln/detail/CVE-2004-1371

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1371

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1371

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-1371