Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
| Software | From | Fixed in |
|---|---|---|
| oracle / reports | 6.0.8 | 6.0.8.x |
| oracle / application_server | 9.0.2 | 9.0.2.x |