J-Security Center

Title: Multiple Oracle XDB FTP / HTTP Services Buffer Overflow Vulnerabilities

Severity: CRITICAL

Description:

Oracle 9i XML Database (XDB) is XML storage and retrieval software. The Oracle XDB server includes an HTTP service component that listens on TCP port 8080 and an FTP component that listens on TCP port 2100.

In a paper titled "Variations in exploit methods between Linux and Windows" presented at Blackhat 2003, David Litchfield has illustrated multiple vulnerabilities in the Oracle 9i XML Database (XDB).

The issues present themselves in XDB HTTP and FTP services. A remote attacker may trigger a buffer overflow because routines that process login credentials for HTTP and FTP services and that process parameters passed to the 'test' and 'UNLOCK' FTP commands fail to perform sufficient bounds checking.

Successful exploits may allow the attacker to run arbitrary code in the security context of the vulnerable service.

Oracle has stated that Oracle 9i Release 1 and prior are not affected.

We will divide this record into individual BIDs after further analysis of these conditions.

Affected Products:

  • Oracle Oracle9i Enterprise Edition 9.2.0 .0.1
  • Oracle Oracle9i Personal Edition 9.2.0 .0.1
  • Oracle Oracle9i Standard Edition 9.2.0 .0.1

References:

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.