VendorsOracledatabase_server8.1.6
Vulnerabilities

Oracle Database Server 8.1.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2003-0222
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Published 2003-04-30 · Modified
9.0EPSS 0.110
CVE-2002-0567
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
Published 2003-04-02 · Modified
7.5EPSS 0.087
CVE-2005-3641
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
Published 2005-11-16 · Modified
7.5EPSS 0.047
CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
Published 2002-02-02 · Modified
4.61 PoCEPSS 0.017
CVE-2001-0942
dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.
Published 2002-02-02 · Modified
4.6EPSS 0.006