CVE-2001-0833: Oracle Database Server

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."

Affected products

• Oracle Database Server: up to and including 9.0.1; version 8.0 only; version 8.1 only

Published 2001-12-06. Last modified 2026-06-16.