CVE-2003-0634

Name of the Vulnerable Software and Affected Versions: Oracle9i Database versions prior to Release 2 and 1 Oracle 8i

Description: A stack-based buffer overflow issue exists in the PL/SQL EXTPROC functionality, allowing authenticated database users, and in some cases arbitrary database users, to execute arbitrary code by providing a long library name.

Recommendations: For Oracle9i Database Release 2 and 1, update to a version that includes the fix for this issue. For Oracle 8i, consider disabling the EXTPROC functionality as a temporary workaround until a patch is available. Restrict access to the PL/SQL EXTPROC functionality to minimize the risk of exploitation.