Check Point Advisories

Oracle Database Server AUTH_SESSKEY Stack Buffer Overflow - Ver2 (CVE-2009-1979)

Check Point Reference:	CPAI-2014-0783
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2009-1979
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A buffer overflow vulnerability has been reported in the Oracle Database server. The vulnerability is due to an error in the Oracle Database server that fails to sufficiently validate the length field of the AUTH_SESSKEY parameter. A remote attacker could exploit this vulnerability by sending malicious packets to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.