Intrusion PreventionOracle9i.XDB.FTP.Pass.Overflow
Description
Indicates an attempt to exploit of a buffer overflow vulnerability in Oracle9i 9.2 .0.1 database server.
Oracle 9i has service called the Oracle XML Database or XDB that can be accessed via an HTTP based service on TCP port 8080 or an ftp based service on TCP port 2100. Multiple buffer overflow vulnerabilities are reported in it that may allow an attacker to execute arbitrary code on the vulnerable system. An attacker may send an overly long username/password to the ftp XDB service to cause a stack-based buffer overflow and execute arbitrary code on the affected system.
Affected Products
Oracle Oracle9i 9.2 .0.1
Impact
Unauthorized access to, and compromise of, the affected system.
Recommended Actions
Upgrade to Oracle Oracle9i 9.2 .0.4. or later
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:Oracle. 9i. XDB. FTP. Pass. Overflow:Oracle9i. XDB. FTP. Pass. Overflow |
| ID | 12130 |
| Created | Sep 11, 2006 |
| Updated | Jun 09, 2022 |
| Risk |
|
| CVE ID | CVE-2003-0727 |
| Exploit Prediction Score | 93.21% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Oracle |