| Package | Affected versions | Patched versions |
|---|---|---|
| database server | = 7.3.3= 7.3.4= 8.0.1= 8.0.2= 8.0.3= 8.0.4= 8.0.5= 8.0.5.1= 8.0.6= 8.1.5= 8.1.6= 8.1.7= 9.2.1= 9.2.2 | |
| oracle8i | = 8.0.6= 8.0.6.3= 8.0x= 8.1.5= 8.1.6= 8.1.7= 8.1.7.1= 8.1.7.4= 8.1x | |
| oracle9i | = 9.0= 9.0.1= 9.0.1.2= 9.0.1.3= 9.0.1.4= 9.0.2= 9.2.0.1= 9.2.0.2 |
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free