CVE-2002-0567: Oracle Database Server

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

Affected products

• Oracle Database Server: version 8.0.1 only; version 8.0.2 only; version 8.0.3 only; version 8.0.4 only; version 8.0.5 only; version 8.0.5.1 only; …
• Oracle ORACLE8I: version 8.1.5 only; version 8.1.6 only; version 8.1.7 only; version 8.1.7.1 only; version enterprise_8.0.5.0.0 only; version enterprise_8.0.6.0.0 only; …
• Oracle ORACLE9I: version 9.0 only; version 9.0.1 only

Published 2002-07-03. Last modified 2026-06-16.