CVE-2003-0894

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-11-17 · updated 2026-06-16

Description

Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.

Affected products

Oracle9I: enterprise_9.0.1, enterprise_9.2.0.4, personal_9.0.1, personal_9.2.0.4, standard_9.0, standard_9.0.1 (+5)

References

http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf
http://securitytracker.com/id?1007956
http://www.kb.cert.org/vuls/id/496340
http://www.securityfocus.com/bid/8844
http://www.securityfocus.com/bid/8845
https://exchange.xforce.ibmcloud.com/vulnerabilities/13451
http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf
http://securitytracker.com/id?1007956
http://www.kb.cert.org/vuls/id/496340
http://www.securityfocus.com/bid/8844
http://www.securityfocus.com/bid/8845
https://exchange.xforce.ibmcloud.com/vulnerabilities/13451

Get alerted when CVE-2003-0894 or the next vulnerability affects your stack