Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle数据库连接远程缓冲区溢出漏洞
Vulnerability Description
Oracle是一款企业级数据库服务程序,占有54%市场份额。 Oracle的数据库连接功能对参数缺少正确的边界缓冲区检查,远程攻击者可以利用这个漏洞进行典型缓冲区溢出攻击,可能以Oralce进程权限在系统上执行任意指令。 Oracle提供数据库连接功能,允许从其他数据库服务器查询当前数据库。提供超长的参数给'CREATE DATABASE LINK'查询的连接字符串(默认情况下,'CREATE DATABASE LINK'权限只分配给连接用途,多数情况下大多数帐户拥有此权限,权限可比SCOTT和ADAMS
CVSS Information
N/A
Vulnerability Type
N/A