[Full-Disclosure] Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i

http://www.red-database-security.com/advisory/advisory200409033.htm RDS200409032 - Red-Database-Security GmbH Research Advisory Name Buffer Overflow in DBMSSYSTEM.KSDWRT in Oracle8i - 9i Systems Affected Oracle 8i - Oracle9i all platforms Severity Medium Risk Category Buffer Overflow/Denial of...

[Full-Disclosure] SQL Injection via CTXSYS.DRILOAD in Oracle 8i/9i

http://www.red-database-security.com/advisory/advisory200409031.htm RDS200409031 - Red-Database-Security GmbH Research Advisory Name SQL Injection via CTXSYS.DRILOAD in Oracle 8i/9i Systems Affected Oracle 8i / Oracle9i all platforms Severity High Risk Category SQL Injection Vendor URL...

CVE-2002-0567

Oracle 8i and 9i with PL/SQL package for External Procedures EXTPROC allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process...

R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0006 Oracle 8i/9i Listener SERVICECURLOAD Denial of Service...

CVE-2002-0858

CVE-2002-0858 involves the Oracle 9i/8i packages (catsnmp) installed with the dbsnmp user using a default password. The issue allows an attacker to perform restricted database operations and potentially gain additional privileges due to the insecure dbsnmp account. Affected component: catsnmp ins...

CVE-2002-0567

Oracle 8i and 9i with PL/SQL package for External Procedures EXTPROC allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process...

Buffer overflow in Oracle 8i TNS Listener

Buffer overflow in pasing Net8 requests...

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow

/ source: https://www.securityfocus.com/bid/4413/info Oracle 8i is a powerful relational database product. It is available for Windows, Linux, and a wide range of Unix operating systems. A vulnerability has been reported with some versions of Oracle 8i for Linux. A local attacker able to execute...

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow / source: https://www.securityfocus.com/bid/4413/info Oracle 8i is a powerful relational database product. It is available for Windows, Linux, and a wide range of Unix operating systems. A vulnerability has been reported with some...

CVE-2001-0517

Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0...

CVE-2001-0517

Oracle 8i on Solaris is vulnerable to a Denial of Service via a malformed listener connection where the Maximum Transport Data size is set to 0 (CVE-2001-0517). The issue is described in the ISS/X-Force advisory as one of four DoS vectors against the Oracle listener, with the affected component b...

Oracle 8i - 'dbsnmp' Remote Denial of Service

// source: https://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in Oracle 8i. If either of the dbsnmpstart or...

Oracle 8i - dbsnmp Remote Denial of Service

Oracle 8i - dbsnmp Remote Denial of Service // source: https://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in...

CVE-2001-0498

Oracle 8i (version 8.1.7 and earlier) is affected by CVE-2001-0498 via Transparent Network Substrate (TNS) over Net8/SQLNet. The issue allows remote denial of service when a malformed SQLNet connection request uses a large header-extension offset. The connected sources confirm the affected compon...

CVE-2001-0499

Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...

CVE-2001-0499

Oracle 8i TNS Listener (CVE-2001-0499) is affected by a stack/buffer overflow when processing an overly long ARGUMENTS string, enabling remote code execution as the listener's process user. Public materials in the connected docs show an exploit path (Metasploit module, exploit scripts) and refere...

CVE-2001-0515

CVE-2001-0515 concerns the Oracle Listener in Oracle 7.3 and 8i, where a remote attacker can cause a denial of service by sending a malformed connection packet with an excessively large offset_to_data value. The issue, characterized as part of a four-pronged set of Oracle Listener DoS vulnerabili...

CVE-2001-0499

Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...

Oracle 8i - TNS Listener Buffer Overflow

Oracle 8i - TNS Listener Buffer Overflow // source: https://www.securityfocus.com/bid/2941/info Oracle 8i ships with a component called TNS Listener. TNS Listener is used to arbitrate communication between remote database clients/applications and the database server. There exists a remotely...

Oracle 8i Enterprise Edition vulnerabilities

The Oracle 8i Enterprise Edition server contains multiple vulnerabilities in the code used to process LDAP requests. In the encoding section of the test suite, this product failed an indeterminate number of test cases in the group that tests a server's response to invalid encodings of BER...