Oracle Internet Directory Format String Vulnerabilities
Vendor-supplied updates that rectify this issue are available:
1) OID release 18.104.22.168.0 (shipping with Oracle9i) on all Unix platforms
2) OID release 22.214.171.124.0 (shipping with Oracle9i) on Windows
3) OID release 126.96.36.199.0 (shipping with Oracle8i) on Solaris
Download the patchset for your platform from Oracle's Worldwide Support web site, Metalink, http://metalink.oracle.com.
The patch number for OID release 188.8.131.52.0 is 1888945
The patch number for OID release 184.108.40.206.0 is 1888998