CVSS: 10.0EPSS: 43%CPEs: 10EXPL: 0CVE-2003-0095
https://notcve.org/view.php?id=CVE-2003-0095
03 Mar 2003 — Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP. • http://marc.info/?l=bugtraq&m=104549693426042&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 46%CPEs: 10EXPL: 0CVE-2003-0096
https://notcve.org/view.php?id=CVE-2003-0096
21 Feb 2003 — Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function. • http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 2%CPEs: 4EXPL: 0CVE-2002-0857
https://notcve.org/view.php?id=CVE-2002-0857
20 Aug 2002 — Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file. Vulnerabilidad de formato de cadenas en la utilidad Oracle Listener Control (lsnrctl) en Oracle 9.2, 9.0, 8.1 y 7.3.4 permite a atacantes remotos ejecutar código arbitrario el sitstema Oracle DBA mediante la introducción de cadenas de f... • http://marc.info/?l=bugtraq&m=102933735716634&w=2 •
CVSS: 9.8EPSS: 1%CPEs: 27EXPL: 0CVE-2002-0567
https://notcve.org/view.php?id=CVE-2002-0567
03 Jul 2002 — Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process. • http://marc.info/?l=bugtraq&m=101301332402079&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 1CVE-2001-0833 – Oracle OTRCREP Oracle 8/9 - Home Environment Variable Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0833
06 Dec 2001 — Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability." • https://www.exploit-db.com/exploits/21045 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2001-0941 – Oracle 8/9i - DBSNMP Oracle Home Environment Variable Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0941
30 Nov 2001 — Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. • https://www.exploit-db.com/exploits/21044 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-0832
https://notcve.org/view.php?id=CVE-2001-0832
22 Nov 2001 — Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability." • http://marc.info/?l=bugtraq&m=100386756715645&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2001-0943
https://notcve.org/view.php?id=CVE-2001-0943
31 Aug 2001 — dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs. • http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-1041
https://notcve.org/view.php?id=CVE-2001-1041
31 Aug 2001 — oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. • http://marc.info/?l=bugtraq&m=100395579811880&w=2 •