Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*
part: a version: 9.0.1.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Oracle9I (db3762a3-5783-559e-978c-b012f8e72891) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-1495 |
vulnerable | 2026-06-08 04:48:26.783368 |
Details available
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1339 |
vulnerable | 2026-06-08 04:47:53.679677 |
Details available
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1338 |
vulnerable | 2026-06-08 04:47:53.672957 |
Details available
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0222 |
vulnerable | 2026-06-08 04:47:21.072966 |
Details available
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Published: 2003-04-30T04:00:00.000Z
Updated: 2024-08-08T01:43:36.042Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0096 |
vulnerable | 2026-06-08 04:47:20.499317 |
Details available
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
Published: 2003-02-21T05:00:00.000Z
Updated: 2024-08-08T01:43:35.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0095 |
vulnerable | 2026-06-08 04:47:20.497432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1264 |
vulnerable | 2026-06-08 04:46:23.281034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1118 |
vulnerable | 2026-06-08 04:46:22.974011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0856 |
vulnerable | 2026-06-08 04:46:22.381558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0840 |
vulnerable | 2026-06-08 04:46:22.353608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.