EUVD-2001-1022

Malware in sbrugna...

CVE-2001-0833: Undefined Security Weakness

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLEHOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."...

CVE-2001-1041

CVE-2001-1041 affects Oracle 8.0.x, 8.1.x, and 9.0.1. The vulnerability arises from a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by ORACLE_HOME, enabling local users to overwrite arbitrary files. The root cause is the mishandling of...

CVE-2001-0832: Undefined Security Weakness

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in 1 the ORACLEHOME/rdbms/log directory or 2 an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Orac...

CVE-2001-0516

CVE-2001-0516 affects the Oracle listener (Oracle 9i and 8.0-era setups). The vulnerability is triggered by a malformed connection packet containing an incorrect requester_version value, causing the listener to crash and enabling a remote denial of service. It is one of four related issues descri...

CVE-2001-0516: Undefined Security Weakness

Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requesterversion value that does not match an expected offset to the data...