CVE-2001-0499: oracle oracle8i

EPSS trend

Probability

85.20%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 85.20% on 18-09-2026

18-09-202618-10-2026

EPSS score

85.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Oracle 8i - TNS Listener Buffer Overflow
Maturity: weaponized
MetasploitremoteVerified
Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow
exploit/windows/oracle/tns_arguments
Maturity: weaponized

References

5 links

www.nai.com/research/covert/advisories/050.aspVendor AdvisoryX Refsource NAI
www.kb.cert.org/vuls/id/620495Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/2941VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/6758VDB EntryX Refsource XF
www.cert.org/advisories/CA-2001-16.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Related vulnerabilities

CVE-2003-0634oracleoracle8i+16.88%23y ago02-08-2003 04:00Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.CVE-2003-0096oracledatabase_server+215.93%23y ago21-02-2003 05:00Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.CVE-2003-0222oracledatabase_server+211.04%23y ago30-04-2003 04:00Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.CVE-2003-0095oracledatabase_server+213.11%22y ago01-09-2004 04:00Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.CVE-2001-0498oracleoracle8i2.10%25y ago27-07-2001 04:00Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.CVE-2001-0126oracleoracle8i4.03%25y ago07-05-2001 04:00Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

All vulnerabilities inoracle8i

CVE-2001-0499: oracle oracle8i

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References