| Max CVSS | 9.0 | Min CVSS | 4.4 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1363 | 7.2 |
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
|
02-02-2024 - 14:01 | 04-08-2004 - 04:00 | |
| CVE-2004-1364 | 8.5 |
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
|
19-10-2018 - 15:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1366 | 4.6 |
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
|
11-07-2017 - 01:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1369 | 5.0 |
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
|
11-07-2017 - 01:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1371 | 9.0 |
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
|
11-07-2017 - 01:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1370 | 7.5 |
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.S
|
11-07-2017 - 01:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1365 | 4.6 |
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
|
11-07-2017 - 01:30 | 04-08-2004 - 04:00 | |
| CVE-2004-1367 | 4.4 |
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow loca
|
18-10-2016 - 02:53 | 04-08-2004 - 04:00 | |
| CVE-2004-0637 | 6.5 |
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
|
10-09-2008 - 04:00 | 02-09-2004 - 04:00 |