CVE-2004-1368
- EPSS 5.3%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- EPSS 3.78%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
CVE-2004-1370
- EPSS 1.81%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.S...
- EPSS 32.44%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.