Oracle Internet Directory Format String Vulnerabilities
Vendor-supplied updates that rectify this issue are available:
1) OID release 184.108.40.206.0 (shipping with Oracle9i) on all Unix platforms
2) OID release 220.127.116.11.0 (shipping with Oracle9i) on Windows
3) OID release 18.104.22.168.0 (shipping with Oracle8i) on Solaris
Download the patchset for your platform from Oracle's Worldwide Support web site, Metalink, http://metalink.oracle.com.
The patch number for OID release 22.214.171.124.0 is 1888945
The patch number for OID release 126.96.36.199.0 is 1888998