CVE-2003-0222

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

• CWE-119

• http://marc.info/?l=bugtraq&m=105162831008176&w=2
• http://marc.info/?l=ntbugtraq&m=105163376015735&w=2
• http://otn.oracle.com/deploy/security/pdf/2003alert54.pdfPatch, Vendor Advisory
• http://www.ciac.org/ciac/bulletins/n-085.shtml
• http://www.securityfocus.com/bid/7453Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11885
• http://marc.info/?l=bugtraq&m=105162831008176&w=2
• http://marc.info/?l=ntbugtraq&m=105163376015735&w=2
• http://otn.oracle.com/deploy/security/pdf/2003alert54.pdfPatch, Vendor Advisory
• http://www.ciac.org/ciac/bulletins/n-085.shtml
• http://www.securityfocus.com/bid/7453Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11885

Published

May 12, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0216Unknown vulnerability in Cisco Catalyst 7.5(1) allows local …
• CVE-2003-0217Cross-site scripting (XSS) vulnerability in Neoteris Instant…
• CVE-2003-0218Buffer overflow in PostMethod() function for Monkey HTTP Dae…
• CVE-2003-0219Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remot…
• CVE-2003-0220Buffer overflow in the administrator authentication process …
• CVE-2003-0221The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1…
• CVE-2003-0223Cross-site scripting vulnerability (XSS) in the ASP function…
• CVE-2003-0224Buffer overflow in ssinc.dll for Microsoft Internet Informat…
• CVE-2003-0225The ASP function Response.AddHeader in Microsoft Internet In…
• CVE-2003-0226Microsoft Internet Information Services (IIS) 5.0 and 5.1 al…
• CVE-2003-0227The logging capability for unicast and multicast transmissio…
• CVE-2003-0228Directory traversal vulnerability in Microsoft Windows Media…