Vulnerabilities > Oracle > Database Server > 8.1.7.4

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0298 Unspecified vulnerability in Oracle Database Server
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
network
low complexity
oracle
5.0
2004-08-04 CVE-2004-1363 Incorrect Calculation of Buffer Size vulnerability in Oracle products
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
network
low complexity
oracle CWE-131
critical
9.8
2001-12-06 CVE-2001-0833 Buffer Overflow vulnerability in Oracle OTRCREP Oracle Home Environment Variable
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."
local
low complexity
oracle
7.2
2001-12-06 CVE-2001-0832 Local Security vulnerability in Oracle9i Enterprise Edition
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
local
low complexity
oracle
2.1