Rule: --Sid: 2681-- Summary: This event is generated when an attempt is made to exploit a knownvulnerability in an Oracle database server.-- Impact: Serious. Possible execution of arbitrary code and Denial of Service.--Detailed Information:This event is generated when an attempt is made to exploit a knownvulnerability in an Oracle database implementation. Multiple bufferoverflow conditions are present in numerous packages and procedures.Exploitation of these vulnerable procedures may allow an attacker toexecute code of their choosing as the user running the database. In thecase of databases running on Microsoft Windows platforms, this is theLocal System account which may mean a compromise of the operating systemas well as the database.This event indicates that an attempt has been made to exploit avulnerability in the procedure sdo_code_size. This procedure is included inmdsys.sdo_admin.--Affected Systems:	Oracle Oracle9i--Attack Scenarios: If an attacker can supply enough data to the procedure in question, itmay be possible to cause the overflow condition to occur and present theattacker with the opportunity to execute code of their choosing.-- Ease of Attack: Simple.-- False Positives:None Known--False Negatives:None Known-- Corrective Action: Apply the appropriate vendor supplied patch--Contributors: Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Alex Kirk <alex.kirk@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--