CVE-2003-0095

CVE-2003-0095 describes a critical buffer overflow in ORACLE.EXE affecting Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6. This vulnerability allows remote, unauthenticated attackers to execute arbitrary code by supplying an excessively long username during the login process, particularly through client applications that handle their own authentication. With a CVSS score of 10.0, it represents a severe risk with low attack complexity and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.