CVE-2003-0634

Name: CVE-2003-0634
Creator: NVD / NIST
Published: 2003-08-27T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 6.88%

Last modified Jun 16, 2026

CVE-2003-0634 is a vulnerability of currently unknown severity. Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.. EPSS estimates a 6.88% chance of exploitation in the next 30 days.

Description

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.

Metrics

EPSS Probability

6.88%

93.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Oracle	Oracle8i	enterprise_8.1.5_.0.0
Oracle	Oracle8i	enterprise_8.1.5_.0.2
Oracle	Oracle8i	enterprise_8.1.5_.1.0
Oracle	Oracle8i	enterprise_8.1.6_.0.0
Oracle	Oracle8i	enterprise_8.1.6_.1.0
Oracle	Oracle8i	enterprise_8.1.7_.0.0
Oracle	Oracle8i	enterprise_8.1.7_.1.0
Oracle	Oracle8i	standard_8.1.5
Oracle	Oracle8i	standard_8.1.6
Oracle	Oracle8i	standard_8.1.7
Oracle	Oracle8i	standard_8.1.7_.0.0
Oracle	Oracle8i	standard_8.1.7_.1
Oracle	Oracle8i	standard_8.1.7_.4
Oracle	Oracle9i	client_9.2.0.1
Oracle	Oracle9i	client_9.2.0.2
Oracle	Oracle9i	enterprise_9.0.1
Oracle	Oracle9i	enterprise_9.2.0.1
Oracle	Oracle9i	enterprise_9.2.0.2
Oracle	Oracle9i	personal_9.0.1
Oracle	Oracle9i	personal_9.2.0.1
Oracle	Oracle9i	personal_9.2.0.2
Oracle	Oracle9i	standard_9.0
Oracle	Oracle9i	standard_9.0.1
Oracle	Oracle9i	standard_9.0.1.2
Oracle	Oracle9i	standard_9.0.1.3
Oracle	Oracle9i	standard_9.0.1.4
Oracle	Oracle9i	standard_9.0.2
Oracle	Oracle9i	standard_9.2.0.1
Oracle	Oracle9i	standard_9.2.0.2

References

Timeline

Published: Aug 27, 2003
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2003-0634?

How severe is CVE-2003-0634?

Severity scoring for CVE-2003-0634 is pending analysis. The EPSS model estimates a 6.88% probability of exploitation in the next 30 days.

How do I fix CVE-2003-0634?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2003-0634?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST