CVE-2004-1363

Critical

Published: 04/08/2004(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Buffer overflow vulnerability in extproc component in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

Risk Assessment

An attacker can remotely take control of the Oracle database system, leading to compromise of data confidentiality, integrity, and availability.

Recommendation

Apply the security patch provided by Oracle for this vulnerability immediately and restrict access to external procedures (extproc) to trusted users only.

Original NVD description (English source)

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.