CVE-2004-1363
CRITICAL9.8CVSS v3
7.2CVSS v2
27.66%
EPSS (exploit probability)
CWE-131CWE
Description
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.