DB: Oracle sys.pbsde.init Procedure Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Oracle database servers. An over-long parameter sent to the sys.pbsde.init procedure, can allow code to be injected into the server's memory. The injected code is executed with the privileges of the user "System" on windows based platforms and the user "Oracle" on Unix based platforms. An unsuccessful attack can terminate the application and create a denial-of-service condition of the database server.

Extended Description

Various Oracle Database Server, Oracle Enterprise Manager, Oracle Application Server, Oracle Collaboration Suite, Oracle E-Business Suite and Applications, and Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne are affected by multiple vulnerabilities. The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Oracle has released a Critical Patch Update advisory for October 2005 to address these vulnerabilities. This Critical Patch Update addresses the vulnerabilities for supported releases. Earlier, unsupported releases are likely to be affected by the issues as well. Specific details regarding these vulnerabilities are not currently available. This record will be updated and split into individual BIDs for each issue as further information is disclosed.

Affected Products

Oracle oracle9i_personal_edition

References

BugTraq: 15134

CVE: CVE-2005-3438

URL: http://www.red-database-security.com/advisory/details_oracle_cpu_october.html http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html

Short Name

DB:ORACLE:SYS:PBSDE-INIT-OF

Severity

Critical

Recommended

False

Recommended Action

Drop

DB: Oracle sys.pbsde.init Procedure Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?