CVE-2003-1208

CVE-2003-1208 describes multiple buffer overflow vulnerabilities in Oracle 9i versions prior to 9.2.0.3. These flaws allow local users to execute arbitrary code by supplying excessively long values to the TIME_ZONE session parameter or to the NUMTOYMINTERVAL, NUMTODSINTERVAL, or FROM_TZ functions. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk with network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 88/100, further emphasizing its high potential impact. Despite its high severity, there is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention or exploitation in the wild.