Page 2 of 8 results (0.003 seconds)

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. • http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf http://www.cert.org/advisories/CA-2001-18.html http://www.ciac.org/ciac/bulletins/l-116.shtml http://www.kb.cert.org/vuls/id/869184 http://www.securityfocus.com/bid/3047 https://exchange.xforce.ibmcloud.com/vulnerabilities/6902 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack. • http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html http://www.kb.cert.org/vuls/id/610904 https://exchange.xforce.ibmcloud.com/vulnerabilities/5804 •

CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 2

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter. • https://www.exploit-db.com/exploits/183 https://www.exploit-db.com/exploits/20312 http://www.securityfocus.com/archive/1/140340 http://www.securityfocus.com/archive/1/140709 https://exchange.xforce.ibmcloud.com/vulnerabilities/5401 •