Oracle

Oracle9i

52 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2003-0095

  • EPSS 33.07%
  • Published 03.03.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own a...

7.5

CVE-2002-1264

  • EPSS 7.39%
  • Published 12.11.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.

5

CVE-2002-1118

Exploit
  • EPSS 1.59%
  • Published 28.10.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.

6.8

CVE-2002-0840

  • EPSS 91.95%
  • Published 11.10.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web pag...

7.5

CVE-2002-0965

  • EPSS 77.67%
  • Published 04.10.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log...

7.5

CVE-2002-0858

  • EPSS 0.4%
  • Published 05.09.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.

5

CVE-2002-0856

  • EPSS 0.74%
  • Published 05.09.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.

5

CVE-2002-0509

  • EPSS 0.86%
  • Published 12.08.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521.

7.5

CVE-2002-0571

Exploit
  • EPSS 0.84%
  • Published 03.07.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.

7.5

CVE-2002-0559

  • EPSS 26.41%
  • Published 03.07.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP L...