Oracle: >> Oracle8i >> 8.1.6 Security Vulnerabilities
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
CVSS Score
9.0
EPSS Score
0.125
Published
2003-05-12
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.
CVSS Score
5.0
EPSS Score
0.016
Published
2002-10-28
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
CVSS Score
7.5
EPSS Score
0.018
Published
2002-07-03
Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.
CVSS Score
5.0
EPSS Score
0.005
Published
2001-07-21
Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-07-21
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
CVSS Score
4.6
EPSS Score
0.002
Published
2000-12-19