CVE-2002-0567 in Oracle9i

Riassunto

di MITRE

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Divulgazione: 03/07/2002
• Moderazione: accettato
• Voce: VDB-18387
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.08739
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0567
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0567
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0567/