Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle oracle9i 9.0.2.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-1339
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote malicious users to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Oracle Oracle9i 9.0.1.3Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.2.0.2Oracle Oracle9i 9.0.1Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.2.3Oracle Oracle9i 9.2.0.1Oracle Database Server 10.2.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0.2.1Oracle Oracle9i 9.0.2.2Oracle Oracle9i 9.0.2Oracle Oracle9i 9.0.2.0.0
NA
CVE-2004-1338
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the S...
Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.1.3Oracle Oracle9i 9.0.2.3Oracle Oracle9i 9.2.0.1Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.0.2Oracle Oracle9i 9.2.0.2Oracle Database Server 10.2.1Oracle Oracle9i 9.0.2.0.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Oracle9i 9.0.2.1Oracle Oracle9i 9.0.2.2
NA
CVE-2003-1193
Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 up to and including 3.0.9.8.5 allow remote malicious users to execute arbitrary SQL commands...
Oracle Application Server Portal 3.0.9.8.5Oracle Application Server Portal 9.0.2.3Oracle Oracle9i 9.0.2.2Oracle Oracle9i 9.0.2.3Oracle Application Server Portal 9.0.2.3aOracle Application Server Portal 9.0.2.3bOracle Oracle9i 9.0.2Oracle Oracle9i 9.0.2.0.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0.2.1
NA
CVE-2005-3204
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote malicious users to inject arbitrary web script or HTML via the query string in an HTTP request.
Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Enterprise 9.0.1.5 FipsOracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Enterprise 9.2.0.6Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Standard 9.0.1.2Oracle Oracle9i Standard 9.0.1.3Oracle Oracle9i Standard 9.0.1.4Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Oracle9i Developer 9.0.4Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Personal 9.0.4Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0Oracle Oracle9i Standard 9.0.1
NA
CVE-2004-1707
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libc...
Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server Portal 3.0.9.8.5Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Standard 8.0.6Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Client 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.0.2Oracle Application ServerOracle Application Server 1.0.2Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server Portal 9.0.2.3b
NA
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
NA
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote malicious users to bypass access restrictions for certain procedures via an encoded URL w...
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.9Oracle Enterprise Manager 9Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle10g Standard 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0
NA
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Enterprise 8.1.6 .0.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 8.1.7Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Application Server
NA
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.3
NA
CVE-2004-1364
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote malicious users to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Collaboration Suite Release 1Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Database Control 10.1.2Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.1.7 .1Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Personal 9.0.1.5Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook