← back
CVE-2004-1774

CVE-2004-1774

EPSS 2.7%
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/25397unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/20078http://www.appsecinc.com/resources/alerts/oracle/2004-0001/http://www.frsirt.com/exploits/20050413.OracleExploit.sql.phphttp://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfhttp://www.securiteam.com/securitynews/5CP010KE0W.htmlhttp://www.securityfocus.com/bid/13145