CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 1CVE-2001-0833 – Oracle OTRCREP Oracle 8/9 - Home Environment Variable Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0833
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability." • https://www.exploit-db.com/exploits/21045 http://marc.info/?l=bugtraq&m=100386756715645&w=2 http://online.securityfocus.com/archive/1/201295 http://online.securityfocus.com/archive/1/222612 http://otn.oracle.com/deploy/security/pdf/otrcrep.pdf http://www.ciac.org/ciac/bulletins/m-011.shtml http://www.securityfocus.com/bid/3139 https://exchange.xforce.ibmcloud.com/vulnerabilities/6940 •
CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 1CVE-2001-0941 – Oracle 8/9i - DBSNMP Oracle Home Environment Variable Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. • https://www.exploit-db.com/exploits/21044 http://marc.info/?l=bugtraq&m=100716693806967&w=2 http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf http://www.securityfocus.com/bid/3138 https://exchange.xforce.ibmcloud.com/vulnerabilities/7643 •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2001-0942
https://notcve.org/view.php?id=CVE-2001-0942
dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp. • http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf http://seclists.org/lists/bugtraq/2001/Dec/0000.html http://www.securityfocus.com/bid/3137 https://exchange.xforce.ibmcloud.com/vulnerabilities/7645 •
CVSS: 2.1EPSS: 0%CPEs: 3EXPL: 0CVE-2001-0832
https://notcve.org/view.php?id=CVE-2001-0832
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability." • http://marc.info/?l=bugtraq&m=100386756715645&w=2 http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2001-0831
https://notcve.org/view.php?id=CVE-2001-0831
Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access. Vulnerabilidad en Oracle Label Security en Oracle 8.1.7 y 9.0.1 cuando se usan la funcionalidad de auditar, SET_LABEL o SQL*Predicate, permite a usuarios locales ganar privilegios adicionales. • http://marc.info/?l=bugtraq&m=100386756715645&w=2 http://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf http://www.iss.net/security_center/static/7344.php http://www.securityfocus.com/bid/3465 •