Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2004-0638

EPSS 17.25% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0638

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle 8i/9i DBMS_SYSTEM.KSDWRT()缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Database是一款商业性质大型数据库系统。 Oracle Database的KSDWRT()函数对参数检查缺少充分编辑缓冲区检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 拥有执行dbms_system包权限的Oracle用户可以通过使用特殊构建的参数给KSDWRT()处理，可触发缓冲区溢出，精心构建提交数据可能以进程权限执行任意指令。 默认情况下DBA用户拥有对此包的访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2004-0638

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0638

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-01-19 · 77 CVEs total

CVE-2004-1377GNU A2PS fixps.in脚本不安全临时文件漏洞
CVE-2005-0111MySQL MaxDB websql CGI 堆栈溢出漏洞
CVE-2005-0064Unix/Linux厂商Xpdf makeFileKey2堆栈溢出漏洞
CVE-2005-0043Apple iTunes m3u/pls播放列表远程缓冲区溢出漏洞
CVE-2005-0012Dillo 式化字符串漏洞
CVE-2005-0005ImageMagick .psd图象文件解码堆溢出漏洞
CVE-2005-0002POP Password Changer未授权密码更改漏洞
CVE-2005-0001Linux Kernel i386 SMP页错误处理器特权提升漏洞
CVE-2004-1379Xine-lib DVD子图象解码器堆溢出漏洞
CVE-2004-1378Jabber Studio JabberD远程服务拒绝漏洞
CVE-2005-0065Microsoft Windows TCP/IP协议栈ICMP重置TCP连接漏洞
CVE-2004-1376Microsoft Internet Explorer安全漏洞
CVE-2004-1375HP-UX SAM本地特权提升漏洞
CVE-2004-1374NetBSD内核多个缓冲区溢出漏洞
CVE-2004-1373Nullsoft SHOUTcast文件请求远程格式串处理漏洞
CVE-2004-1372IBM DB2 rec2xml远程缓冲区溢出漏洞
CVE-2004-1371Oracle wraped过程远程缓冲区溢出漏洞
CVE-2004-1370Oracle多个PL/SQL注入漏洞
CVE-2004-1369Oracle extproc目录遍历漏洞
CVE-2004-1368Oracle extproc目录遍历漏洞

Showing top 20 of 77 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-0638

No comments yet

Leave a comment