Exploitation Summary
EIP tracks 9 public exploits for CVE-2003-0727.
PoCs published by Metasploit, y0, David Litchfield, including Metasploit module exploits/windows/http/oracle9i_xdb_pass.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Oracle 9i XDB FTP via the UNLOCK command. It leverages a SEH overwrite to achieve remote code execution on Windows systems.
Description
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
Exploits (9)
This exploit targets a stack-based buffer overflow in Oracle 9i XDB FTP via the UNLOCK command. It leverages a SEH overwrite to achieve remote code execution on Windows systems.
This exploit targets a stack buffer overflow in Oracle 9i XDB HTTP service via a maliciously crafted Authorization header. It leverages a known return address to execute arbitrary payloads, achieving remote code execution.
This exploit targets a stack-based buffer overflow in Oracle 9i XDB FTP server via an overly long PASS command. It leverages a known return address in oraclient9.dll to execute arbitrary payloads on Windows systems.
This is a Metasploit module exploiting a stack overflow in Oracle 9i XDB HTTP service via a malformed Authorization header. It targets Windows systems and delivers a payload for remote code execution.
This exploit targets a buffer overflow vulnerability in Oracle XDB FTP Service via the UNLOCK command. It sends a crafted payload to spawn a reverse shell to a specified IP and port.
This exploit targets a buffer overflow vulnerability in Oracle 9i XDB HTTP PASS. It sends a maliciously crafted HTTP request with an oversized 'Authorization' header containing shellcode to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Oracle 9i XDB HTTP service via a malformed Authorization header. It targets Oracle 9.2.0.1 and delivers a payload to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in Oracle 9i XDB FTP service via an overly long PASS command. It targets Oracle 9.2.0.1 on Windows, using a return address from oraclient9.dll to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in Oracle 9i XDB FTP via the UNLOCK command. It leverages SEH overwrites to achieve remote code execution on Windows systems.