vulnwire
2.1low

CVE-2003-07276 exploits

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of s…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
68.4%
percentile 99%
Public exploits
6
Exploit-DB

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.

Exploit prediction (EPSS)

68.39% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-80 Oracle XDB FTP Service - UNLOCK Buffer Overflow · remote · 2003-08-13
  • EDB-42780 Oracle 9i XDB 9.2.0.1 - HTTP PASS Buffer Overflow · remote · 2017-09-25
  • EDB-16809 Oracle 9i XDB (Windows x86) - HTTP PASS Overflow (Metasploit) · remote · 2010-09-20
  • EDB-16731 Oracle 9i XDB (Windows x86) - FTP PASS Overflow (Metasploit) · remote · 2010-04-30
  • EDB-16714 Oracle 9i XDB (Windows x86) - FTP UNLOCK Overflow (Metasploit) · remote · 2010-10-05
  • EDB-1365 Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit) · remote · 2005-12-08

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:N/A:P

Classification

Technology feeds
Oracle Database (RSS, critical only)

References

  • otn.oracle.com /deploy/security/pdf/2003Alert58.pdf · x_refsource_CONFIRM, x_transferred
  • exploit-db.com /exploits/42780/ · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.