Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_server | Oracle | 9.0.2 (including) | 9.0.2 (including) |
| Reports | Oracle | 6.0.8 (including) | 6.0.8 (including) |