Oracle Database Server EXTPROC Buffer Overflow Vulnerability

TITLE: Oracle Database Server EXTPROC Buffer Overflow Vulnerability
CLASS: Boundary Condition Error
CVE: CAN-2003-0634

REMOTE: Yes
LOCAL: No
PUBLISHED: Jul 24 2003 12:00AM
UPDATE: Jul 24 2003 12:00AM
CREDIT: Discovery is credited to David Litchfield and Chris Anley of Next Generation Security Software Ltd.
VULNERABLE:

Oracle Oracle9i Standard Edition 9.2 .0.2
Oracle Oracle9i Standard Edition 9.2 .0.1
Oracle Oracle9i Standard Edition 9.0.2
Oracle Oracle9i Standard Edition 9.0.1 .4
Oracle Oracle9i Standard Edition 9.0.1 .3
Oracle Oracle9i Standard Edition 9.0.1 .2
Oracle Oracle9i Standard Edition 9.0.1
Oracle Oracle9i Standard Edition 9.0
Oracle Oracle9i Personal Edition 9.2 .0.2
Oracle Oracle9i Personal Edition 9.2 .0.1
Oracle Oracle9i Personal Edition 9.0.1
Oracle Oracle9i Enterprise Edition 9.2 .0.2
Oracle Oracle9i Enterprise Edition 9.2 .0.1
Oracle Oracle9i Enterprise Edition 9.0.1
Oracle Oracle9i Client Edition 9.2 .0.2
Oracle Oracle9i Client Edition 9.2 .0.1
Oracle Oracle8i Standard Edition 8.1.7 .4
Oracle Oracle8i Standard Edition 8.1.7 .1
Oracle Oracle8i Standard Edition 8.1.7 .0.0
Oracle Oracle8i Standard Edition 8.1.7
Oracle Oracle8i Standard Edition 8.1.6
Oracle Oracle8i Standard Edition 8.1.5
Oracle Oracle8i Enterprise Edition 8.1.7 .1.0
Oracle Oracle8i Enterprise Edition 8.1.7 .0.0
Oracle Oracle8i Enterprise Edition 8.1.6 .1.0
Oracle Oracle8i Enterprise Edition 8.1.6 .0.0
Oracle Oracle8i Enterprise Edition 8.1.5 .1.0
Oracle Oracle8i Enterprise Edition 8.1.5 .0.2
Oracle Oracle8i Enterprise Edition 8.1.5 .0.0
NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

The EXTPROC executable used by the Oracle Database Server is prone to a buffer overflow. Successful exploitation could result in arbitrary code execution with potentially elevated privileges.

** This issue is reportedly related to BID 4033. A reliable source has indicated that Oracle patches for the issue described in BID 4033 introduce this issue. Symantec has not been able to confirm this information.

Exploit

The discoverer of this vulnerability has reportedly developed a working exploit that is not publically available or known to be circulating in the wild.

Solution

Solution:
Oracle has made fixes available. Administrators can download the patches at http://metalink.oracle.com.

The attached Oracle advisory also contains a release schedule for patches across all supported platforms.

References

References:

PhpLog

BNLug Benevento Linux Users Group