| Package | Affected versions | Patched versions |
|---|---|---|
| database server | = 8.0.6= 9.2.1= 9.2.2 | |
| oracle8i | = 8.1.7= 8.1.7.1 | |
| oracle9i | = 9.0= 9.0.1= 9.0.1.2= 9.0.1.3= 9.0.2 |
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free