Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0222

high · 9

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

9
CVSS
11.0%
EPSS (exploit prob.)
96th
EPSS percentile
2003-05-12
Published

AV:N/AC:L/Au:S/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
oracledatabase_server7.3.3
oracledatabase_server7.3.4
oracledatabase_server8.0.1
oracledatabase_server8.0.2
oracledatabase_server8.0.3
oracledatabase_server8.0.4
oracledatabase_server8.0.5
oracledatabase_server8.0.5.1
oracledatabase_server8.0.6
oracledatabase_server8.1.5
oracledatabase_server8.1.6
oracledatabase_server8.1.7
oracledatabase_server9.2.1
oracledatabase_server9.2.2
oracleoracle8i8.0.6
oracleoracle8i8.0.6.3
oracleoracle8i8.0x
oracleoracle8i8.1.5
oracleoracle8i8.1.6
oracleoracle8i8.1.7
oracleoracle8i8.1.7.1
oracleoracle8i8.1.7.4
oracleoracle8i8.1x
oracleoracle9i9.0
oracleoracle9i9.0.1
oracleoracle9i9.0.1.2
oracleoracle9i9.0.1.3
oracleoracle9i9.0.1.4
oracleoracle9i9.0.2
oracleoracle9i9.2.0.1
oracleoracle9i9.2.0.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0222