medium4.6Public exploit code
CVE-2000-0987
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Internet Directory 2.0.6 - oidldap2000-10-18 · local · linux · Verified
- Oracle (oidldapd connect) - Local Command Line Overflow2000-11-16 · local · linux · Verified
Impact
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Internet Directory | Version 2.0.6 |
| Oracle | Oracle8i | Version 8.1.6 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/140340
- http://www.securityfocus.com/archive/1/140709
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5401
- http://www.securityfocus.com/archive/1/140340
- http://www.securityfocus.com/archive/1/140709
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5401