CVE-2004-0637: Code Injection
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0637?
CVE-2004-0637 is considered to have a high severity due to the potential for local users to execute commands with elevated privileges.
How do I fix CVE-2004-0637?
To fix CVE-2004-0637, it is recommended to restrict access to the ctxsys.driload package and apply the latest patches from Oracle.
Who is affected by CVE-2004-0637?
CVE-2004-0637 affects local users of Oracle Database Server versions 8.1.7.4 through 9.2.0.4.
What type of vulnerability is CVE-2004-0637?
CVE-2004-0637 is a privilege escalation vulnerability that allows local users to gain additional permissions.
Is CVE-2004-0637 still relevant today?
While CVE-2004-0637 is an older vulnerability, it remains relevant for organizations using unsupported versions of Oracle Database.