CVE-2003-0634: Oracle ORACLE8I

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.

Affected products

• Oracle ORACLE8I: version enterprise_8.1.5_.0.0 only; version enterprise_8.1.5_.0.2 only; version enterprise_8.1.5_.1.0 only; version enterprise_8.1.6_.0.0 only; version enterprise_8.1.6_.1.0 only; version enterprise_8.1.7_.0.0 only; …
• Oracle ORACLE9I: version client_9.2.0.1 only; version client_9.2.0.2 only; version enterprise_9.0.1 only; version enterprise_9.2.0.1 only; version enterprise_9.2.0.2 only; version personal_9.0.1 only; …

Published 2003-08-27. Last modified 2026-06-16.