Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle9i vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2003-1208
Multiple buffer overflows in Oracle 9i 9 prior to 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.
Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0Oracle Oracle9i Standard 9.0Oracle Oracle9i Standard 9.0.1Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Standard 9.0.1.2Oracle Oracle9i Standard 9.0.1.3Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Standard 9.2.0.1Oracle Oracle9i Standard 9.2.0.2Oracle Oracle9i Personal 9.0.1Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.2Oracle Oracle9i Standard 9.2
NA
CVE-2003-0894
Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x prior to 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.
Oracle Oracle9i Standard 9.0Oracle Oracle9i Standard 9.0.1Oracle Oracle9i Standard 9.0.1.2Oracle Oracle9i Standard 9.0.1.3Oracle Oracle9i Personal 9.0.1Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.2.0.4Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.2
NA
CVE-2004-1338
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the S...
Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.1.3Oracle Oracle9i 9.0.2.3Oracle Oracle9i 9.2.0.1Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.0.2Oracle Oracle9i 9.2.0.2Oracle Database Server 10.2.1Oracle Oracle9i 9.0.2.0.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Oracle9i 9.0.2.1Oracle Oracle9i 9.0.2.2
NA
CVE-2004-1339
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote malicious users to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Oracle Oracle9i 9.0.1.3Oracle Oracle9i 9.0.1.4Oracle Oracle9i 9.2.0.2Oracle Oracle9i 9.0.1Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.2.3Oracle Oracle9i 9.2.0.1Oracle Database Server 10.2.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0.2.1Oracle Oracle9i 9.0.2.2Oracle Oracle9i 9.0.2Oracle Oracle9i 9.0.2.0.0
NA
CVE-2005-3204
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote malicious users to inject arbitrary web script or HTML via the query string in an HTTP request.
Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Enterprise 9.0.1.5 FipsOracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Enterprise 9.2.0.6Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Standard 9.0.1.2Oracle Oracle9i Standard 9.0.1.3Oracle Oracle9i Standard 9.0.1.4Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Oracle9i Developer 9.0.4Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Personal 9.0.4Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0Oracle Oracle9i Standard 9.0.1
NA
CVE-2004-0638
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long sec...
Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Standard 9.2.0.3Oracle Oracle9i Standard 9.2.0.4Oracle Oracle8i Enterprise 8.1.7.4Oracle Oracle8i Standard 8.1.7.4Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Personal 9.0.1.5
NA
CVE-2002-1264
Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote malicious users to execute arbitrary code via a long USERID parameter in the isqlplus URL.
Oracle Oracle9i 9.0.1Oracle Oracle9i Release 2 9.2.1Oracle Oracle9i Release 2 9.2.2Oracle Oracle9i 9.0.1.3Oracle Oracle9i 9.0.2Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0
NA
CVE-2002-0856
SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote malicious users to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
Oracle Database Server 9.2.1Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Oracle9i 9.0.1.2Oracle Oracle9i 9.0.2Oracle Oracle9i 9.0.1.3
NA
CVE-2004-2244
The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and previous versions, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote malicious users to cause a denial of service (CPU and memory consumptio...
Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Standard 9.2.0.2Oracle Application Server 1.0.2.2Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2
NA
CVE-2006-1705
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.
Oracle Oracle10g Enterprise 10.2.3Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Personal 10.1.0.3Oracle Oracle10g Standard 10.1.0.4Oracle Oracle10g Standard 10.1.0.4.2Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Standard 9.2Oracle Oracle9i Standard 9.2.0.1Oracle Oracle10g Personal 10.1.0.3.1Oracle Oracle10g Personal 10.1.0.4Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Standard 10.2.0.1Oracle Oracle9i Enterprise 9.2.0.6Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.2.0.2Oracle Oracle9i Standard 9.2.0.3Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Personal 10.2.3Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Standard 10.2.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook