BID:6085

Oracle 9i Database Server iSQL Plus Malformed USERID Buffer Overflow Vulnerability

Info

Oracle 9i Database Server iSQL Plus Malformed USERID Buffer Overflow Vulnerability

Bugtraq ID:	6085
Class:	Boundary Condition Error
CVE:	CVE-2002-1264
Remote:	Yes
Local:	No
Published:	Oct 31 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery of this vulnerability credited to David Litchfield of Next Generation Security Software.
Vulnerable:	Oracle Oracle9i Standard Edition 9.2 .2 Oracle Oracle9i Standard Edition 9.2 .1 Oracle Oracle9i Standard Edition 9.2 .0.2 Oracle Oracle9i Standard Edition 9.2 .0.1 Oracle Oracle9i Standard Edition 9.0.2 Oracle Oracle9i Standard Edition 9.0.1 .3 Oracle Oracle9i Standard Edition 9.0.1 .2 Oracle Oracle9i Standard Edition 9.0.1 Oracle Oracle9i Standard Edition 9.0

Not Vulnerable:

Discussion

Oracle 9i Database Server iSQL Plus Malformed USERID Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for Oracle 9i Database Server. The vulnerability affects iSQL *Plus which is a web based interface to the Database Server.

The vulnerability is due to improper bounds checking of the USERID parameter.

An attacker can exploit this problem to overwrite sensitive stack variables, in an effort to execute arbitrary code. Code will be executed with the privileges of the underlying web server, typically the 'oracle' user or 'SYSTEM' user in Windows operating systems.

Exploit / POC

Oracle 9i Database Server iSQL Plus Malformed USERID Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Oracle 9i Database Server iSQL Plus Malformed USERID Buffer Overflow Vulnerability

Solution:
Oracle has released an alert for this vulnerability. Further details may be found in the referenced advisory.

Oracle Oracle9i Standard Edition 9.0