| Package | Affected versions | Patched versions |
|---|---|---|
| database server | = 8.0.6= 9.2.1= 9.2.2 | |
| oracle8i | = 8.1.7= 8.1.7.1 | |
| oracle9i | = 9.0= 9.0.1= 9.0.1.2= 9.0.1.3= 9.0.2 |
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free