Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Application_server | Oracle | 9.0.2 (including) | 9.0.2 (including) |
Reports | Oracle | 6.0.8 (including) | 6.0.8 (including) |