CVE:CVE-2004-1774
CNNVD:CNNVD-200408-234
Oracle 10g 10.1.0.2 Patch 2之前版本的MD2 package (MDSYS.MD2.SDO_CODE_SIZE)的SDO_CODE_SIZE程序存在缓冲区溢出漏洞。本地用户借助超长LAYER参数执行任意代码。
solution:Upgrade oracle application_server to a higher version than 10.1.0.2,and avoid the version 10.1.0.2; Upgrade oracle oracle10g to a higher version than enterprise_10.1.0.2,personal_10.1.0.2,standard_10.1.0.2,and avoid the version enterprise_10.1.0.2,personal_10.1.0.2,standard_10.1.0.2