CVE-2003-0894: Oracle ORACLE9I

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.

Affected products

• Oracle ORACLE9I: version enterprise_9.0.1 only; version enterprise_9.2.0.4 only; version personal_9.0.1 only; version personal_9.2.0.4 only; version standard_9.0 only; version standard_9.0.1 only; …

Published 2003-11-17. Last modified 2026-06-16.