CVE-2005-1178

SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature...

CVE-2004-1774

CVE-2004-1774: Buffer overflow in the MD2 package’s SDO_CODE_SIZE function (MDSYS.MD2.SDO_CODE_SIZE) on Oracle Database 10g before 10.1.0.2 Patch 2. The overflow is triggered by a long LAYER parameter, enabling arbitrary code execution. Public documentation indicates vulnerable Oracle 10g configu...

[AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service in Oracle interMedia AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle/2005-01.html April 18, 2005 Affected versions: Oracle Database Server versions 9i and 10g Risk level: Medium Credits: This...

Oracle Database 10g Multiple Remote Vulnerabilities

According to its version number, the installation of Oracle on the remote host is reportedly subject to multiple vulnerabilities, some of which don't require authentication. They may allow an attacker to craft SQL queries such that they would be able to retrieve any file on the system and...

CVE-2005-0873

CVE-2005-0873 covers multiple XSS vulnerabilities in Oracle Reports Server 10g (9.0.4.3.3), specifically in test.jsp via the desname and repprod parameters. The NVD entry confirms remote, non-authenticated XSS with arbitrary script/HTML injection. Nessus plugin notes a remediation: disable access...

oracleXSS10g.txt

Oracle Reports Server 10g 9.0.4.3.3 Vulnerable to Cross Site Scripting http://paolo/reports/examples/Tools/test.jsp?repprod&desname='alertdocument.cookie; http://paolo/reports/examples/Tools/test.jsp?repprod"alertdocument.cookie; Paolo sends GREETS to Oracle secalert Paolo...

Oracle Reports Server 10g - Multiple Cross-Site Scripting Vulnerabilities

Oracle Reports Server 10g - Multiple Cross-Site Scripting Vulnerabilities...

CVE-2005-0298

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information...

CVE-2005-0298

CVE-2005-0298 concerns Oracle 8i–10g DIRECTORY objects that expose the location of a specific operating system directory. Read access to such a DIRECTORY object can allow a user to obtain sensitive information about the OS directory path, indicating a potential information-disclosure risk. The pr...

CVE-2005-0297

CVE-2005-0297 concerns a SQL injection vulnerability in Oracle Database 9i and 10g that allows remote attackers to execute arbitrary SQL commands and gain privileges. The available documents identify the affected product family (Oracle Database 9i/10g) and the underlying issue (SQL injection) wit...

CVE-2004-1363

CVE-2004-1363 : The provided data confirms a buffer overflow in the extproc component of Oracle 10g. An attacker can trigger remote code execution by manipulating environment variables in the library name, which are expanded after the length check. The vulnerability is described as enabling remot...

CVE-2004-1364

CVE-2004-1364 is an Oracle extproc directory traversal vulnerability affecting Oracle 9i and 10g. The flaw allows remote attackers to access arbitrary libraries outside the $ORACLE_HOME/bin directory by leveraging the extproc mechanism, potentially executing OS commands with the privileges of the...

CVE-2004-1369

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

CVE-2004-1371

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure...

CVE-2004-1365

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user...

CVE-2004-1369

CVE-2004-1369 concerns the TNS Listener in Oracle 10g. The vulnerability allows remote attackers to cause a denial of service (listener crash) by sending a malformed service_register_NSGR request, where a value is used as an invalid offset for a pointer that references incorrect memory. The prima...

CVE-2004-1367

Oracle 10g Database Server, when installed with a password that contains an exclamation point "!" for the 1 DBSNMP or 2 SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SY...

CVE-2004-1367

CVE-2004-1367 affects Oracle 10g Database Server. When installed with a password containing an exclamation point for the DBSNMP or SYSMAN user, an error is logged to the world‑readable postDBCreation.log, potentially exposing the password to local users who could use it against SYS or SYSTEM acco...

CVE-2004-1368

ISQLPlus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script...

CVE-2004-1371

CVE-2004-1371 describes a stack-based buffer overflow in Oracle 9i/10g that allows remote attackers to execute arbitrary code by sending a long token in the text of a wrapped procedure. The vulnerability affects Oracle’s database/server components and can enable remote code execution with the att...