1921 matches found
Oracle Database Server 10.1.0.2 - Local Buffer Overflow
/ Advanced SQL Injection in Oracle databases Exploit for the buffer overflow vulnerability in procedure MDSYS.MD2.SDOCODESIZE of Oracle Database Server version 10.1.0.2 under Windows 2000 Server SP4. Fixes available at http://metalink.oracle.com. The exploit creates a SYSDBA user ERIC with a...
ARGENISS-ADV-030501.txt
Argeniss Security Advisory Name: Oracle Database Server Directory transversal Affected Software: Oracle Database Server versions 8i and 9i Severity : Medium Remote exploitable: Yes Authentication to Database Server is needed Credits: Cesar Cerrudo Date: 03/07/05 Advisory Number: ARG030501 Details...
- Argeniss - Oracle Database Server Directory transversal
Argeniss Security Advisory Name: Oracle Database Server Directory transversal Affected Software: Oracle Database Server versions 8i and 9i Severity : Medium Remote exploitable: Yes Authentication to Database Server is needed Credits: Cesar Cerrudo Date: 03/07/05 Advisory Number: ARG030501 Details...
CVE-2005-0701: Undefined Security Weakness
Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...
Oracle Database Server UTL_FILE Directory Traversal File Access
Binary data 2680.prm...
Oracle Database 8i9i - Multiple Directory Traversal Vulnerabilities
Oracle Database 8i9i - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/12749/info Oracle Database server is reported prone to multiple directory traversal vulnerabilities that may allow a remote attacker to read, write, or rename arbitrary files with the...
Multiple Oracle Database Server security problems
SQL injection, privilege escalation, buffer overflows...
Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation
source: https://www.securityfocus.com/bid/11099/info Oracle Database Server is prone to an access validation vulnerability that may permit unprivileged users to execute commands as the DBA. This could compromise the database. SQL exec ctxsys.driload.validatestmt 'create user hacker identified by...
[Full-Disclosure] iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability
Oracle Database Server dbmssystem.ksdwrt Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.02.04a www.idefense.com/application/poi/display?id=135&type=vulnerabilities September 2, 2004 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databas...
[Full-Disclosure] [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server
AppSecInc Advisory: Multiple vulnerabilities in Oracle Database Server Date: August 31, 2004 Detailed Information Provided Online At: http://www.appsecinc.com/resources/alerts/oracle/2004-0001/ Credit: These vulnerabilities were researched and discovered by Cesar Cerrudo and Esteban Martinez Fayo...
US-CERT Technical Cyber Security Alert TA04-245A -- Multiple Vulnerabilities in Oracle Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-245A Multiple Vulnerabilities in Oracle Products Original release date: September 1, 2004 Last revised: -- Source: US-CERT Systems Affected The following Oracle applications are affected: Oracle Database 10g Release...
CVE-2003-0095
The CVE-2003-0095 entry concerns a buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6. The vulnerability permits remote code execution via a long username supplied during login, exploitable through client applications that perform their own authentication, demonstra...
CVE-2003-0095
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP...
CVE-2003-0095: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP...
Oracle command-line program buffer overflow in argument handling
Overview A buffer overflow in some command-line utilities supplied with the Oracle Database Server could allow a local user to gain the privileges of the oracle system user. Description The Oracle 9 i Database Server package includes the oracle and oracleO command-line client programs to connect ...
CVE-2003-0222
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...
CVE-2003-0222
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...
CVE-2003-0222
CVE-2003-0222 : A stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows an attacker to execute arbitrary code via a CREATE DATABASE LINK query containing a connect string with a long USING parameter. The vulnerability requires a valid databa...
CVE-2003-0222: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...