Page 5 of 47 results (0.007 seconds)

CVSS: 9.8EPSS: 3%CPEs: 30EXPL: 0

05 Oct 2002 — Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response. Desbordamientos de búfer en el programa de soporte ApacheBench (ab.c) en Apache anteriores a 1.3.27, y Apache 2.x anteriores a 2.0.43, permite a un servidor web malicioso causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante una respuesta lar... • ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I •

CVSS: 9.8EPSS: 2%CPEs: 4EXPL: 0

20 Aug 2002 — Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file. Vulnerabilidad de formato de cadenas en la utilidad Oracle Listener Control (lsnrctl) en Oracle 9.2, 9.0, 8.1 y 7.3.4 permite a atacantes remotos ejecutar código arbitrario el sitstema Oracle DBA mediante la introducción de cadenas de f... • http://marc.info/?l=bugtraq&m=102933735716634&w=2 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 1

06 Dec 2001 — Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability." • https://www.exploit-db.com/exploits/21045 •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1

30 Nov 2001 — Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. • https://www.exploit-db.com/exploits/21044 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

22 Nov 2001 — Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access. Vulnerabilidad en Oracle Label Security en Oracle 8.1.7 y 9.0.1 cuando se usan la funcionalidad de auditar, SET_LABEL o SQL*Predicate, permite a usuarios locales ganar privilegios adicionales. • http://marc.info/?l=bugtraq&m=100386756715645&w=2 •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

22 Nov 2001 — Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability." • http://marc.info/?l=bugtraq&m=100386756715645&w=2 •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

31 Aug 2001 — oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. • http://marc.info/?l=bugtraq&m=100395579811880&w=2 •