CVE-2003-0632: Buffer Overflow
Published Aug 2, 2003
·Updated
Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL.
Affected Software
10 affected components
Oracle E-Business Suite=11.3
Oracle E-Business Suite=11.1
Oracle Applications=10.7
Oracle E-Business Suite=11.6
Oracle E-Business Suite=11.2
Oracle E-Business Suite=11.8
Oracle E-Business Suite=11.5
Oracle E-Business Suite=11.4
Oracle E-Business Suite=11.7
Oracle Applications=11.0
Event History
Aug 2, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0632?
CVE-2003-0632 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2003-0632?
To mitigate CVE-2003-0632, you should apply the appropriate patches provided by Oracle for affected versions of E-Business Suite.
3
What versions are affected by CVE-2003-0632?
CVE-2003-0632 affects Oracle E-Business Suite versions 11.0 to 11.5.8 and Oracle Applications version 10.7.
4
What type of vulnerability is CVE-2003-0632?
CVE-2003-0632 is classified as a buffer overflow vulnerability.
5
Who can exploit CVE-2003-0632?
CVE-2003-0632 can be exploited by remote attackers who can send specially crafted requests to the vulnerable application.