CVE-2004-0637: Oracle ORACLE8I

Medium severity, CVSS 6.5. EPSS: 17.8% chance of exploitation in the next 30 days.

Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.

Affected products

• Oracle ORACLE8I: version enterprise_8.1.7_.4 only; version standard_8.1.7_.4 only
• Oracle ORACLE9I: version enterprise_9.2.0.4 only; version personal_9.2.0.4 only; version standard_9.0.1.3 only; version standard_9.2.0.4 only

Published 2004-09-02. Last modified 2026-06-16.