CVE-2007-4517

Oracle Database Server - Authenticated Buffer Overflow in XDB_PITRIG_PKG.PITRIG_DROPMETADATA Procedure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4517. PoCs published by David Maman.

AI-analyzed exploit summary This is a PL/SQL exploit for CVE-2007-4517, targeting a buffer overflow in Oracle Database XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA. It executes arbitrary code to create a new administrative user account on the host system.

Description

Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.

Exploits (1)

exploitdb WORKING POC

by David Maman · textremotewindows

https://www.exploit-db.com/exploits/18093

View Code ZIP pw:eip

This is a PL/SQL exploit for CVE-2007-4517, targeting a buffer overflow in Oracle Database XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA. It executes arbitrary code to create a new administrative user account on the host system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Oracle Database 10g Express Edition

Auth required

Prerequisites: Access to a vulnerable Oracle Database instance · Ability to execute PL/SQL procedures

MITRE ATT&CK