187 matches found
CVE-2001-0943
dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the 1 chown or 2 chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs...
CVE-2001-0516
Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requesterversion value that does not match an expected offset to the data...
CVE-2001-0498
Transparent Network Substrate TNS over Net8 SQLNet in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension...
CVE-2001-0516
Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requesterversion value that does not match an expected offset to the data...
Дырка в Oracle JSP/SQLJSP
Можно получить доступ к любым файлам...
Oracle 8.1.7 - JSP/JSPSQL Remote File Reading
source: https://www.securityfocus.com/bid/2288/info A problem with Oracle on the Windows 2000 platform could allow users access to restricted information. This problem in the handling of input by the Oracle software may result in remote users being permitted read access to files on the same...