← Database

CVE-2003-0095

CRITICAL CVSS: 10.0 Published: 2003-03-03 Modified: 2026-06-16

Description

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.

Affected Platforms

Oracle Database ServerOracle Oracle9IOracle Oracle8I

Weakness Type

CWE-119

References