VendorsOracledatabase_server7.3.4
Vulnerabilities

Oracle Database Server 7.3.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2003-0222
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Published 2003-04-30 · Modified
9.0EPSS 0.110
CVE-2002-0857
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Published 2002-08-20 · Modified
7.5EPSS 0.138
CVE-2005-3641
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
Published 2005-11-16 · Modified
7.5EPSS 0.047
CVE-1999-0888
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Published 2000-04-18 · Modified
4.62 PoCEPSS 0.011