10

CVE-2003-1208: oracle oracle9i

CVSS: 10.0v2.0HighModified
Published 19-05-2005Last modified 08-08-2024
Open JSON

Vulnerability summary

CVE-2003-1208 is a high (CVSS 10.0) vulnerability in oracle oracle9i. EPSS estimates a 13.19% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 11 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
13.19%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits11reference

Timeline

  1. 19-05-2005
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

13.19%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.19% on 18-09-2026

18-09-202618-10-2026
EPSS score
13.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

11 found
  • referenceUnverified

    Exploit Reference (osvdb.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (secunia.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (osvdb.org)

    Maturity: unknown

Show all 11 exploits
  • referenceUnverified

    Exploit Reference (archives.neohapsis.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (osvdb.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (osvdb.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (nextgenss.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (nextgenss.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (nextgenss.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (nextgenss.com)

    Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Oracle1 product
  • oracle9ienterprise_9.0.1 | enterprise_9.2.0 | enterprise_9.2.0.1 | enterprise_9.2.0.2 | personal_9.0.1 | personal_9.2 | personal_9.2.0.1 | personal_9.2.0.2 | standard_9.0 | standard_9.0.1 | standard_9.0.1.2 | standard_9.0.1.3 | standard_9.0.1.4 | standard_9.0.2 | standard_9.2 | standard_9.2.0.1 | standard_9.2.0.2

1 vendor · 1 product

References

17 links
Show all 17 references