Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle数据库Parameter/Statement缓冲区溢出漏洞
Vulnerability Description
Oracle是一款大型数据库软件。 Oracle在处理部分参数和函数时缺少充分缓冲区边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以数据库进程权限执行任意指令。 Oralce存在多个缓冲区溢出，具体如下： 1、TIME_ZONE参数指定默认时区置换，TIME_ZONE仅是一个会话参数，而不是一个初始化参数，一个类似的合法请求为： ALTER SESSION SET TIME_ZONE = '-5:00'; TIME_ZONE参数由于缺少充分缓冲区边界检查，提交包含超长字符串的请求可导致触发缓
CVSS Information
N/A
Vulnerability Type
N/A