← Vulnerability feed

Vulnerability record · CVE-2000-0987 · published 19 December 2000

CVE-2000-0987: Oracle internet directory vulnerability

Oracle · Internet Directory

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

4.6 CVSS 2.0 Medium EPSS 1.4% · top 29.1%
4.6CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
23 Sep 2026Last modified by NVD

Description

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/archive/1/140340
http://www.securityfocus.com/archive/1/140709 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5401
http://www.securityfocus.com/archive/1/140340
http://www.securityfocus.com/archive/1/140709 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5401

Track CVE-2000-0987 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-83059Oracle internet directory improper authentication vulnerabilityVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected…EPSS 0.51%10.0CVE-2026-61241Oracle internet directory improper access control vulnerabilityVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected…EPSS 0.51%10.0CVE-2006-0271Oracle database server vulnerabilityUnspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impa…EPSS 3.4%10.0CVE-2006-0262Oracle database server vulnerabilityUnspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has u…EPSS 3.9%10.0CVE-2003-0095Oracle database server memory buffer overflow vulnerabilityBuffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long userna…EPSS 13%10.0CVE-2001-0499Oracle 8i TNS Listener buffer overflow via command argumentsThe Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier contains a buffer overflow reachable through long arguments to the ST…EPSS 85%analysed9.9CVE-2026-61248Oracle internet directory improper access control vulnerabilityVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected…EPSS 0.43%9.8CVE-2026-83066Oracle internet directory improper authentication vulnerabilityVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected…EPSS 0.51%

Source: NIST National Vulnerability Database (record CVE-2000-0987), CISA KEV, FIRST EPSS (scores of 2026-10-06). This page is refreshed as NVD updates the record.