CVE-2003-0096

Oracle Database Server - Buffer Overflow via TO_TIMESTAMP_TZ, TZ_OFFSET, or BFILENAME Function

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.

References (23)

Core 23
Core References
Various Sources x_refsource_confirm
http://otn.oracle.com/deploy/security/pdf/2003alert48.pdf
Various Sources x_refsource_misc
http://www.nextgenss.com/advisories/ora-tmstmpbo.txt
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.html
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.html
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/743954
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6850
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104549743326864&w=2
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/11325.php
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/840666
US Government Resource third-party-advisory x_refsource_cert
http://www.cert.org/advisories/CA-2003-05.html
Various Sources x_refsource_confirm
http://otn.oracle.com/deploy/security/pdf/2003alert50.pdf
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/n-046.shtml
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/11327.php
Various Sources x_refsource_confirm
http://otn.oracle.com/deploy/security/pdf/2003alert49.pdf
Various Sources x_refsource_misc
http://www.nextgenss.com/advisories/ora-bfilebo.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6847
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/11326.php
Various Sources x_refsource_misc
http://www.nextgenss.com/advisories/ora-tzofstbo.txt
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6848
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104550346303295&w=2
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/663786
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104549782327321&w=2

Scores

EPSS 0.1593
EPSS Percentile 96.5%

Details

CWE
CWE-119
Status published
Products (10)
oracle/database_server 8.0.6
oracle/database_server 9.2.1
oracle/database_server 9.2.2
oracle/oracle8i 8.1.7
oracle/oracle8i 8.1.7.1
oracle/oracle9i 9.0
oracle/oracle9i 9.0.1
oracle/oracle9i 9.0.1.2
oracle/oracle9i 9.0.1.3
oracle/oracle9i 9.0.2
Published Mar 03, 2003
Tracked Since Feb 18, 2026