CVE-2004-1368
- EPSS 5.3%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- EPSS 3.78%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
CVE-2004-1370
- EPSS 1.81%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.S...
- EPSS 32.44%
- Veröffentlicht 04.08.2004 04:00:00
- Zuletzt bearbeitet 16.04.2026 00:27:16
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.