| Package | Affected versions | Patched versions |
|---|---|---|
| oracle8i | = enterprise_8.1.7.4= standard_8.1.7.4 | |
| oracle9i | = enterprise_9.0.1.4= enterprise_9.0.1.5= enterprise_9.2.0.3= enterprise_9.2.0.4= personal_9.0.1.4= personal_9.0.1.5= personal_9.2.0.3= personal_9.2.0.4= standard_9.0.1.4= standard_9.0.1.5= standard_9.2.0.3= standard_9.2.0.4 |
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free