Total vulnerabilities in the database
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.
| Software | From | Fixed in |
|---|---|---|
| oracle / oracle9i | 9.0.1 | 9.0.1.x |
| oracle / oracle9i | 9.0.2 | 9.0.2.x |
| oracle / oracle9i | 9.0 | 9.0.x |
| oracle / database_server | 9.2.1 | 9.2.1.x |
| oracle / oracle8i | 8.1.7.1 | 8.1.7.1.x |
| oracle / oracle8i | 8.1.7 | 8.1.7.x |
| oracle / oracle9i | 9.0.1.3 | 9.0.1.3.x |
| oracle / oracle9i | 9.0.1.2 | 9.0.1.2.x |
| oracle / database_server | 9.2.2 | 9.2.2.x |
| oracle / database_server | 8.0.6 | 8.0.6.x |