high7.2Public exploit code
CVE-2001-0833
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Ora…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle OTRCREP Oracle 8/9 - Home Environment Variable Buffer Overflow2001-08-02 · local · unix · Verified
Impact
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | through 9.0.1 Versions 8.0, 8.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=100386756715645&w=2
- http://online.securityfocus.com/archive/1/201295
- http://online.securityfocus.com/archive/1/222612
- http://otn.oracle.com/deploy/security/pdf/otrcrep.pdf
- http://www.ciac.org/ciac/bulletins/m-011.shtml
- http://www.securityfocus.com/bid/3139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6940
- http://marc.info/?l=bugtraq&m=100386756715645&w=2
- http://online.securityfocus.com/archive/1/201295
- http://online.securityfocus.com/archive/1/222612
- http://otn.oracle.com/deploy/security/pdf/otrcrep.pdf
- http://www.ciac.org/ciac/bulletins/m-011.shtml
- http://www.securityfocus.com/bid/3139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6940