oracle database server 8.0.6 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in dbsnmp in Oracle 8.0.6 up to and including 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.

Oracle Database Server 8.1.7 Oracle Database Server 9.0.1 Oracle Database Server 8.0.6 Oracle Database Server 8.1.6

1 EDB exploit

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.

Oracle Database Server 10.1.0.3 Oracle Database Server 10.1.0.3.1 Oracle Database Server 9.2.0.5 Oracle Database Server 9.2.0.6 Oracle Database Server 10.1.0.2 Oracle Database Server 9.0.1.5 Oracle Database Server 9.0.4 Oracle Database Server 9.2.0.4 Oracle Database Server 8.1.7.4 Oracle Database Server 9.0.1.4 Oracle Database Server 8.0.6 Oracle Database Server 8.0.6.3

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote malicious users to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demons...

Oracle Oracle9i 9.0.1 Oracle Oracle9i 9.0.1.2 Oracle Database Server 8.0.6 Oracle Database Server 9.2.1 Oracle Oracle9i 9.0.1.3 Oracle Oracle9i 9.0.2 Oracle Database Server 9.2.2 Oracle Oracle8i 8.1.7 Oracle Oracle8i 8.1.7.1 Oracle Oracle9i 9.0

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote malicious users to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or...

Oracle Oracle8i 8.1.7 Oracle Oracle8i 8.1.7.1 Oracle Oracle9i 9.0 Oracle Oracle9i 9.0.1 Oracle Database Server 8.0.6 Oracle Oracle9i 9.0.1.2 Oracle Oracle9i 9.0.1.3 Oracle Database Server 9.2.1 Oracle Database Server 9.2.2 Oracle Oracle9i 9.0.2

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote malicious users to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote malicious users to bypass authentication by supplying a valid username.

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Database Server 12.1.0.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Database Server 11.2.0.4 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Database Server 12.2.0.1 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Database Server 18c Oracle Communications Billing And Revenue Management 7.5

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Jd Edwards Enterpriseone Orchestrator 9.2 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook