rapid7/metasploit-framework — pull request #1670 by msidagni (2013-03-26 20:22:07+00:00)
Title: Added exploit module for CVE-2003-0095

Added exploit module for CVE-2003-0095 - Oracle Database Server Unauthenticated Remote Overflow

Blog post : http://www.nopsec.com/blog/entry/cve-2003-0095-oracle-database-server-unauthenticated-remote-overflow-metasploit-module

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.

![MSF-CVE-2003-0095](https://f.cloud.github.com/assets/567928/305077/a5d89b0e-964e-11e2-8d39-4a2642be869d.png)

Targets:

- Oracle 9.0.1.1.1 Enterprise Edition - (OptIn)
- Oracle 9.2.0.1.0 Enterprise Edition (OptIn)
- Oracle 9.0.1.1.1 Enterprise Edition - Microsoft Windows Server 2003 Enterprise Edition Service Pack 2 (OptOut)