Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle oracle9i enterprise 9.0.1 vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
7.5
CVSSv2
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote malicious users to bypass access restrictions for certain procedures via an encoded URL w...
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.9Oracle Enterprise Manager 9Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle10g Standard 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0
4.6
CVSSv2
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Enterprise 8.1.6 .0.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 8.1.7Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Application Server
4.6
CVSSv2
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.3
4.4
CVSSv2
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain th...
Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle Enterprise Manager 9.0.1Oracle Enterprise Manager Database Control 10.1.2Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.1.7 .0.0Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Standard 8.1.7 .0.0Oracle Oracle8i Standard 8.1.7 .1Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Enterprise 9.2.0Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Personal 9.0.1.5Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.9
7.8
CVSSv2
CVE-2004-1368
ISQL*Plus in Oracle 10g Application Server allows remote malicious users to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.4Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.5 .0.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle Enterprise Manager 9.0.1Oracle Enterprise Manager Database Control 10.1.2Oracle Oracle10g Standard 9.0.4 .0Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0
5
CVSSv2
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote malicious users to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Enterprise 9.0.4 .0Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .0.0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Client 9.2.0.2Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1
7.5
CVSSv2
CVE-2004-1370
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote malicious users to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COM...
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Client 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Personal 9.0.1.5Oracle Oracle9i Personal 9.2Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Standard 9.0.1Oracle Oracle9i Standard 9.0.1.2
8.5
CVSSv2
CVE-2004-1364
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote malicious users to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Collaboration Suite Release 1Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Database Control 10.1.2Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.1.7 .1Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Personal 9.0.1.5Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook