Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle数据库服务器EXTPROC远程缓冲区溢出漏洞
Vulnerability Description
Oracle Database是一款商业性质大型数据库系统。 Oracle数据库使用EXTPROC时对库名缺少正确的缓冲区边界检查，远程攻击者可以利用这个漏洞对数据库服务进行缓冲区溢出攻击，可能以数据库进程权限在系统上执行任意指令。 Oracle可以通过调用操作系统的库来扩展存储过程，任何库可被extproc装载。NGSSoftware发现一个漏洞，Oracle可以允许攻击者迫使extproc装载任何操作系统库和执行任何功能。攻击者不需要用户ID或密码。Oracle对此漏洞进行了跟踪和修复，除非本地机器调
CVSS Information
N/A
Vulnerability Type
N/A