Oracle: >> Oracle8i Security Vulnerabilities
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
CVSS Score
4.6
EPSS Score
0.008
Published
2001-01-09
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
CVSS Score
4.6
EPSS Score
0.003
Published
2000-12-19
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
CVSS Score
4.6
EPSS Score
0.002
Published
2000-12-19
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVSS Score
6.2
EPSS Score
0.002
Published
2000-03-05
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
CVSS Score
4.6
EPSS Score
0.002
Published
1999-08-16
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
CVSS Score
4.6
EPSS Score
0.005
Published
1999-04-29
Page 5