CVE-2002-0947

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

9.54%

Published

Oct 4, 2002

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.

Affected Products (2)

oracle · application_servervulnerable

oracle · reportsvulnerable

References (14)

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0097.html

http://online.securityfocus.com/archive/1/276524

http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf

http://www.iss.net/security_center/static/9289.php

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/997403

PatchThird Party AdvisoryUS Government Resource

http://www.nextgenss.com/vna/ora-reports.txt

http://www.securityfocus.com/bid/4848

PatchVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0097.html

http://online.securityfocus.com/archive/1/276524

http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf

http://www.iss.net/security_center/static/9289.php

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/997403

PatchThird Party AdvisoryUS Government Resource

http://www.nextgenss.com/vna/ora-reports.txt

http://www.securityfocus.com/bid/4848

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs