CVE-2004-1365
Summary
| CVE | CVE-2004-1365 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2004-08-04 04:00:00 UTC |
| Updated | 2017-07-11 01:30:00 UTC |
| Description | Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Application Server | All | All | All | All |
| Application | Oracle | Application Server | 9.0.2 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.0.0 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.0.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.2 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.3 | All | All | All |
| Application | Oracle | Application Server | 9.0.3 | All | All | All |
| Application | Oracle | Application Server | 9.0.3.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.4 | All | All | All |
| Application | Oracle | Application Server | 9.0.4.0 | All | All | All |
| Application | Oracle | Application Server | 9.0.4.1 | All | All | All |
| Application | Oracle | Application Server | All | All | All | All |
| Application | Oracle | Application Server | 9.0.2 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.0.0 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.0.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.2 | All | All | All |
| Application | Oracle | Application Server | 9.0.2.3 | All | All | All |
| Application | Oracle | Application Server | 9.0.3 | All | All | All |
| Application | Oracle | Application Server | 9.0.3.1 | All | All | All |
| Application | Oracle | Application Server | 9.0.4 | All | All | All |
| Application | Oracle | Application Server | 9.0.4.0 | All | All | All |
| Application | Oracle | Application Server | 9.0.4.1 | All | All | All |
| Application | Oracle | Collaboration Suite | release_1 | All | All | All |
| Application | Oracle | Collaboration Suite | release_1 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.1 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.2 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.3 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.4 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.5 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.6 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.7 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.8 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.9 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.1 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.2 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.3 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.4 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.5 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.6 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.7 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.8 | All | All | All |
| Application | Oracle | E-business Suite | 11.5.9 | All | All | All |
| Application | Oracle | Enterprise Manager | 9 | All | All | All |
| Application | Oracle | Enterprise Manager | 9.0.1 | All | All | All |
| Application | Oracle | Enterprise Manager | 9 | All | All | All |
| Application | Oracle | Enterprise Manager | 9.0.1 | All | All | All |
| Application | Oracle | Enterprise Manager Database Control | 10.1.2 | All | All | All |
| Application | Oracle | Enterprise Manager Database Control | 10.1.2 | All | All | All |
| Application | Oracle | Enterprise Manager Grid Control | 10.1.0.2 | All | All | All |
| Application | Oracle | Enterprise Manager Grid Control | 10.1.0.2 | All | All | All |
| Application | Oracle | Oracle10g | enterprise_10.1.0.2 | All | All | All |
| Application | Oracle | Oracle10g | enterprise_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle10g | personal_10.1_.0.2 | All | All | All |
| Application | Oracle | Oracle10g | personal_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle10g | standard_10.1_.0.2 | All | All | All |
| Application | Oracle | Oracle10g | standard_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle10g | enterprise_10.1.0.2 | All | All | All |
| Application | Oracle | Oracle10g | enterprise_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle10g | personal_10.1_.0.2 | All | All | All |
| Application | Oracle | Oracle10g | personal_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle10g | standard_10.1_.0.2 | All | All | All |
| Application | Oracle | Oracle10g | standard_9.0.4_.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.5_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.6_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.6_.0.1 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.0.2 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.6_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.6_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.4 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.0.6 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.0.6_.3 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.5 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.6 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.1 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.4 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.5_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.6_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.0.6_.0.1 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.0.2 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.5_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.6_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.6_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.1.0 | All | All | All |
| Application | Oracle | Oracle8i | enterprise_8.1.7_.4 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.0.6 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.0.6_.3 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.5 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.6 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.0.0 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.1 | All | All | All |
| Application | Oracle | Oracle8i | standard_8.1.7_.4 | All | All | All |
| Application | Oracle | Oracle9i | client_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | client_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.5 | All | All | All |
| Application | Oracle | Oracle9i | personal_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.5 | All | All | All |
| Application | Oracle | Oracle9i | standard_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.3 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.5 | All | All | All |
| Application | Oracle | Oracle9i | client_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | client_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | enterprise_9.2.0.5 | All | All | All |
| Application | Oracle | Oracle9i | personal_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | personal_9.2.0.5 | All | All | All |
| Application | Oracle | Oracle9i | standard_8.1.7 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.3 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.4 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.1.5 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.0.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.1 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.2 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.3 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.4 | All | All | All |
| Application | Oracle | Oracle9i | standard_9.2.0.5 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| US-CERT Technical Cyber Security Alert TA04-245A -- Multiple Vulnerabilities in Oracle Products | CERT | www.us-cert.gov | Patch, Third Party Advisory, US Government Resource |
| #101782: Mulitple Security Vulnerabilities in Oracle Affect SunMC | SUNALERT | sunsolve.sun.com | |
| 'Oracle extproc local command execution (#NISR23122004C)' - MARC | BUGTRAQ | marc.info | |
| www.ngssoftware.com/advisories/oracle23122004C.txt | MISC | www.ngssoftware.com | Patch, Vendor Advisory |
| US-CERT Vulnerability Note VU#316206 | CERT-VN | www.kb.cert.org | US Government Resource |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Oracle Multiple Unspecified Vulnerabilities | BID | www.securityfocus.com | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.