Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*

part: a version: enterprise_8.0.6_.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductOracle8I (27a288e6-5890-5b70-af19-1c08e5959c0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1707 vulnerable 2026-06-08 04:47:54.845797 Details available
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.
Published: 2005-02-26T05:00:00.000Z
Updated: 2024-08-08T01:00:37.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1371 vulnerable 2026-06-08 04:47:53.870769 Details available
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1370 vulnerable 2026-06-08 04:47:53.806288 Details available
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1369 vulnerable 2026-06-08 04:47:53.802925 Details available
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1368 vulnerable 2026-06-08 04:47:53.799507 Details available
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1367 vulnerable 2026-06-08 04:47:53.796132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1366 vulnerable 2026-06-08 04:47:53.792588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1365 vulnerable 2026-06-08 04:47:53.789997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1364 vulnerable 2026-06-08 04:47:53.787391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1362 vulnerable 2026-06-08 04:47:53.744128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.