CVE-2002-0567: Undefined Security Weakness

Oracle 8i and 9i with PL/SQL package for External Procedures EXTPROC allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process...

R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0006 Oracle 8i/9i Listener SERVICECURLOAD Denial of Service...

CVE-2002-0858

CVE-2002-0858 involves the Oracle 9i/8i packages (catsnmp) installed with the dbsnmp user using a default password. The issue allows an attacker to perform restricted database operations and potentially gain additional privileges due to the insecure dbsnmp account. Affected component: catsnmp ins...

CVE-2002-0858: Undefined Security Weakness

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...

CVE-2002-0567

Oracle 8i and 9i with PL/SQL package for External Procedures EXTPROC allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process...

Apache Win32 Chunked Encoding

This module exploits the chunked transfer integer wrap vulnerability in Apache version 1.2.x to 1.3.24. This particular module has been tested with all versions of the official Win32 build between 1.3.9 and 1.3.24. Additionally, it should work against most co-branded and bundled versions of Apach...

Buffer overflow in Oracle 8i TNS Listener

Buffer overflow in pasing Net8 requests...

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow / source: https://www.securityfocus.com/bid/4413/info Oracle 8i is a powerful relational database product. It is available for Windows, Linux, and a wide range of Unix operating systems. A vulnerability has been reported with some...

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow

/ source: https://www.securityfocus.com/bid/4413/info Oracle 8i is a powerful relational database product. It is available for Windows, Linux, and a wide range of Unix operating systems. A vulnerability has been reported with some versions of Oracle 8i for Linux. A local attacker able to execute...

CVE-2001-0517

Oracle 8i on Solaris is vulnerable to a Denial of Service via a malformed listener connection where the Maximum Transport Data size is set to 0 (CVE-2001-0517). The issue is described in the ISS/X-Force advisory as one of four DoS vectors against the Oracle listener, with the affected component b...

CVE-2001-0517: Undefined Security Weakness

Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0...

Oracle 8i - dbsnmp Remote Denial of Service

Oracle 8i - dbsnmp Remote Denial of Service // source: https://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in...

Oracle 8i - 'dbsnmp' Remote Denial of Service

// source: https://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in Oracle 8i. If either of the dbsnmpstart or...

CVE-2001-0498

Oracle 8i (version 8.1.7 and earlier) is affected by CVE-2001-0498 via Transparent Network Substrate (TNS) over Net8/SQLNet. The issue allows remote denial of service when a malformed SQLNet connection request uses a large header-extension offset. The connected sources confirm the affected compon...

CVE-2001-0499

Oracle 8i TNS Listener (CVE-2001-0499) is affected by a stack/buffer overflow when processing an overly long ARGUMENTS string, enabling remote code execution as the listener's process user. Public materials in the connected docs show an exploit path (Metasploit module, exploit scripts) and refere...

CVE-2001-0499

Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...

CVE-2001-0498: Undefined Security Weakness

Transparent Network Substrate TNS over Net8 SQLNet in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension...

CVE-2001-0515: Undefined Security Weakness

Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offsettodata value...

CVE-2001-0499: Undefined Security Weakness

Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...

CVE-2001-0499

Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...