CVE-2002-0947: Buffer Overflow
Published Oct 4, 2002
·Updated
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
Affected Software
2 affected components
Oracle Application Server=9.0.2
Oracle Reports=6.0.8
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 4, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0947?
CVE-2002-0947 has a high severity level due to its ability to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2002-0947?
To fix CVE-2002-0947, you should upgrade to the latest version of Oracle Reports Server or apply provided patches.
3
What products are affected by CVE-2002-0947?
CVE-2002-0947 affects Oracle Reports Server version 6.0.8 and Oracle Application Server version 9.0.2.
4
What type of attack does CVE-2002-0947 exploit?
CVE-2002-0947 exploits a buffer overflow vulnerability through a long database name parameter.
5
When was CVE-2002-0947 discovered?
CVE-2002-0947 was discovered in 2002 and remains relevant for systems still using the affected versions.