{"schemaVersion":3,"id":"CVE-2003-0095","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.","dates":{"published":"2004-09-01T04:00:00.000Z","modified":"2024-08-08T01:43:35.187Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.13106,"percentile":0.96318,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.13106},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.13106,"percentile":0.96318}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.13106,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.13106,"percentile":0.96318}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"oracle","product":"database_server","name":"database server","label":"database_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.0.6","noFixRecorded":false,"fixedIn":null},{"text":"9.2.1","noFixRecorded":false,"fixedIn":null},{"text":"9.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0.6 | 9.2.1 | 9.2.2","eol":null,"hubHref":"/vendor/oracle/database_server"},{"vendor":"oracle","product":"oracle8i","name":"oracle8i","label":"oracle8i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.1.7","noFixRecorded":false,"fixedIn":null},{"text":"8.1.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.1.7 | 8.1.7.1","eol":null,"hubHref":"/vendor/oracle/oracle8i"},{"vendor":"oracle","product":"oracle9i","name":"oracle9i","label":"oracle9i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0.1","noFixRecorded":false,"fixedIn":null},{"text":"9.0.1.2","noFixRecorded":false,"fixedIn":null},{"text":"9.0.1.3","noFixRecorded":false,"fixedIn":null},{"text":"9.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0 | 9.0.1 | 9.0.1.2 | 9.0.1.3 | 9.0.2","eol":null,"hubHref":"/vendor/oracle/oracle9i"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.cert.org/advisories/CA-2003-05.html","label":"www.cert.org/advisories/CA-2003-05.html","hostname":"www.cert.org","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-046.shtml","label":"www.ciac.org/ciac/bulletins/n-046.shtml","hostname":"www.ciac.org","tags":["Third Party Advisory","Government Resource","X Refsource CIAC"]},{"url":"http://www.securityfocus.com/bid/6849","label":"www.securityfocus.com/bid/6849","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://marc.info/?l=bugtraq&m=104549693426042&w=2","label":"marc.info?l=bugtraq&m=104549693426042&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://otn.oracle.com/deploy/security/pdf/2003alert51.pdf","label":"otn.oracle.com/deploy/security/pdf/2003alert51.pdf","hostname":"otn.oracle.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/11328.php","label":"www.iss.net/security_center/static/11328.php","hostname":"www.iss.net","tags":["VDB Entry","X Refsource XF","Vendor Advisory"]},{"url":"http://www.osvdb.org/6319","label":"www.osvdb.org/6319","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.kb.cert.org/vuls/id/953746","label":"www.kb.cert.org/vuls/id/953746","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-09-01T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T01:43:35.187Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:10:02.656Z","stale":false,"partial":false}}