CVE-2000-0987

Description

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

Affected products

• oracle / internet_directory2.0.6 – 2.0.6
• oracle / oracle8i8.1.6 – 8.1.6

Exploits & proofs of concept

• exploit-dbOracle (oidldapd connect) - Local Command Line Overflowby anonymous
• exploit-dbOracle Internet Directory 2.0.6 - oidldapby Juan Manuel Pascual Escribá

References

• MISChttp://www.securityfocus.com/archive/1/140340
• MISChttp://www.securityfocus.com/archive/1/140709
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5401