CVE Feed

    Dashboard / CVE / CVE-2003-0096

    CVE-2003-0096

    Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.

    Published:Feb 21, 2003
    Last Modified:Apr 16, 2026
    EPS:Feb 21, 2003
    EPSS Score:0.46317
    CVSS Score:9

    Affected Products

    Vendor
    Oracle
    Product
    Database Server
    Vendor
    Oracle
    Product
    Oracle8i
    Vendor
    Oracle
    Product
    Oracle9i

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-71102 (CVSS 9.1) — Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are af…
    CVE-2026-71100 (CVSS 5.3) — Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3…
    CVE-2026-71064 (CVSS 9.6) — Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are af…
    CVE-2026-71063 (CVSS 9.6) — Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are af…
    CVE-2026-71062 (CVSS 8.5) — Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4…
    CVE-2026-60175 (CVSS 8.8) — Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3…
    CVE-2026-47060 (CVSS 6.5) — Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-…
    CVE-2026-47045 (CVSS 6.8) — Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-…
    CVE-2026-47038 (CVSS 2.7) — Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3…
    CVE-2026-46975 (CVSS 5.8) — Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3…

    References

    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html
    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.html
    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.html
    http://marc.info/?l=bugtraq&m=104549743326864&w=2
    http://marc.info/?l=bugtraq&m=104549782327321&w=2
    http://marc.info/?l=bugtraq&m=104550346303295&w=2
    http://otn.oracle.com/deploy/security/pdf/2003alert48.pdf
    http://otn.oracle.com/deploy/security/pdf/2003alert49.pdf
    http://otn.oracle.com/deploy/security/pdf/2003alert50.pdf
    http://www.cert.org/advisories/CA-2003-05.html
    http://www.ciac.org/ciac/bulletins/n-046.shtml
    http://www.iss.net/security_center/static/11325.php
    http://www.iss.net/security_center/static/11326.php
    http://www.iss.net/security_center/static/11327.php
    http://www.kb.cert.org/vuls/id/663786
    http://www.kb.cert.org/vuls/id/743954
    http://www.kb.cert.org/vuls/id/840666
    http://www.nextgenss.com/advisories/ora-bfilebo.txt
    http://www.nextgenss.com/advisories/ora-tmstmpbo.txt
    http://www.nextgenss.com/advisories/ora-tzofstbo.txt
    http://www.securityfocus.com/bid/6847
    http://www.securityfocus.com/bid/6848
    http://www.securityfocus.com/bid/6850
    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html
    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.html
    http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.html
    http://marc.info/?l=bugtraq&m=104549743326864&w=2
    http://marc.info/?l=bugtraq&m=104549782327321&w=2
    http://marc.info/?l=bugtraq&m=104550346303295&w=2
    http://otn.oracle.com/deploy/security/pdf/2003alert48.pdf
    http://otn.oracle.com/deploy/security/pdf/2003alert49.pdf
    http://otn.oracle.com/deploy/security/pdf/2003alert50.pdf
    http://www.cert.org/advisories/CA-2003-05.html
    http://www.ciac.org/ciac/bulletins/n-046.shtml
    http://www.iss.net/security_center/static/11325.php
    http://www.iss.net/security_center/static/11326.php
    http://www.iss.net/security_center/static/11327.php
    http://www.kb.cert.org/vuls/id/663786
    http://www.kb.cert.org/vuls/id/743954
    http://www.kb.cert.org/vuls/id/840666
    http://www.nextgenss.com/advisories/ora-bfilebo.txt
    http://www.nextgenss.com/advisories/ora-tmstmpbo.txt
    http://www.nextgenss.com/advisories/ora-tzofstbo.txt
    http://www.securityfocus.com/bid/6847
    http://www.securityfocus.com/bid/6848
    http://www.securityfocus.com/bid/6850

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High