CVE-2007-4517

Buffer overflow in the XDB.XDBPITRIGPKG.PITRIGDROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long 1 OWNER or 2 NAME argument...

CVE-2007-4517

CVE-2007-4517 affects Oracle Database 10g Release 2, specifically the XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure. A buffer overflow is triggered by a long combined OWNER or NAME parameter, enabling remote authenticated attackers to execute arbitrary code. Exploitation evidence exists in multipl...

Oracle 9i XDB HTTP PASS Overflow (win32)

This module exploits a stack buffer overflow in the authorization code of the Oracle 9i HTTP XDB service. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the...

Update Protection against Oracle XDB HTTP Buffer Overflow Vulnerability

Oracle 9i XML database suffers from a buffer overflow vulnerability. By passing an overly long username or password, an attacker can execute arbitrary code on the target system...

Oracle 9i XDB FTP UNLOCK Overflow (win32)

By passing an overly long token to the UNLOCK command, a stack based buffer overflow occurs. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the Blackhat...

oracle9i_xdb_http.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit)

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit ======================================================= This file is part of the Metasploit Framework and may be redistributed...

Oracle 9.2.0.1 - Universal XDB HTTP Pass Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Oracle 9i XDB FTP PASS Overflow (win32)

By passing an overly long string to the PASS command, a stack based buffer overflow occurs. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the Blackhat...

CVE-2003-0727

CVE-2003-0727 refers to multiple buffer overflows in the Oracle 9i Database Release 2 XML DB (XDB) functionality. Public references describe stack/buffer overflow conditions in Oracle 9i XDB services (HTTP and FTP) that can be triggered by long inputs to XDB commands, enabling local users to caus...

Oracle XDB FTP Service - UNLOCK Buffer Overflow

Oracle XDB FTP Service - UNLOCK Buffer Overflow / Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003/ / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include include includ...

Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit

No description provided by source. / Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003 / / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include stdio.h include windows.h...

Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit ===================================================== + vulnerabilities network level/stack based buffer overflow + special network...

Oracle XDB FTP Service - UNLOCK Buffer Overflow

/ Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003/ / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include include include int GainControlOfOraclechar , char ; int...