Oracle XDB component PITRIG_TRUNCATE buffer overflow

Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...

Oracle 10g R1 - pitrig_drop Get Users Hash PLSQL Injection

Oracle 10g R1 - pitrigdrop Get Users Hash PLSQL Injection // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written...

Oracle 10g R1 - PITRIG_TRUNCATE Get Users Hash PLSQL Injection

Oracle 10g R1 - PITRIGTRUNCATE Get Users Hash PLSQL Injection // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / /...

oracle-xdboverflow.txt

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / BUFFER OVERFLOW / // / POC exploit , Crash database / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Buffer overflow

Buffer overflow in the XDB.XDBPITRIGPKG.PITRIGDROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long 1 OWNER or 2 NAME argument...

CVE-2007-4517

Buffer overflow in the XDB.XDBPITRIGPKG.PITRIGDROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long 1 OWNER or 2 NAME argument...

Oracle database server buffer overflow

Buffer overflow in XDB.XDBPITRIGPKG.PITRIGDROPMETADATA procedure...

CVE-2006-5341: Undefined Security Weakness

Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors, aka 1 Vuln DB14 and 2 DB15 related to xdb.dbmsxdbz. NOTE: as of 20061023, Oracle has not disputed reports from reliable third...