CVE-2003-0727
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release...
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
- Record
CVE-2003-0727- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
- Record
CVE-2003-0727- Updated
- 2026-11-02
EUVDEUVD-2003-0718 No score
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
- Record
EUVD-2003-0718- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c66m-82r6-rfrp No score
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release...
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
- Record
GHSA-c66m-82r6-rfrp- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit) | 2005-12-08 |
| Exploit-DB | Oracle 9i XDB (Windows x86) - FTP UNLOCK Overflow (Metasploit) | 2010-10-05 |
| Exploit-DB | Oracle 9i XDB (Windows x86) - FTP PASS Overflow (Metasploit) | 2010-04-30 |
| Exploit-DB | Oracle 9i XDB (Windows x86) - HTTP PASS Overflow (Metasploit) | 2010-09-20 |
| Exploit-DB | Oracle 9i XDB 9.2.0.1 - HTTP PASS Buffer Overflow | 2017-09-25 |
| Exploit-DB | Oracle XDB FTP Service - UNLOCK Buffer Overflow | 2003-08-13 |
| Metasploit | Oracle 9i XDB FTP PASS Overflow (win32) | 2003-08-18 |
| Metasploit | Oracle 9i XDB FTP UNLOCK Overflow (win32) | 2003-08-18 |
| Metasploit | Oracle 9i XDB HTTP PASS Overflow (win32) | 2003-08-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0727 is a low vulnerability (CVSS 2.1) in Oracle Database Server, published September 3, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 68.4%, the 99th percentile. No source names a fixed version.