CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a...
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Exploit likelihood
What each source reports
NVD Score used
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
- Record
CVE-2004-1365- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
- Record
CVE-2004-1365- Updated
- 2026-11-02
EUVDEUVD-2004-1362 No score
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
- Record
EUVD-2004-1362- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c547-5m3r-v2p8 No score
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a...
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
- Record
GHSA-c547-5m3r-v2p8- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1365 is a medium vulnerability (CVSS 4.6) in Oracle Application Server, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.36%, the 94th percentile. No source names a fixed version.
References
ngssoftware.com/advisories/oracle23122004C.txt
exchange.xforce.ibmcloud.com/vulnerabilities/18662
marc.info?l=bugtraq&m=110382471608835&w=2
kb.cert.org/vuls/id/316206
us-cert.gov/cas/techalerts/TA04-245A.html
securityfocus.com/bid/10871
sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
nvd.nist.gov/vuln/detail/CVE-2004-1365
github.com/advisories/GHSA-c547-5m3r-v2p8