Oracle Internet Directory Format String Vulnerabilities
Vendor-supplied updates that rectify this issue are available:
1) OID release 126.96.36.199.0 (shipping with Oracle9i) on all Unix platforms
2) OID release 188.8.131.52.0 (shipping with Oracle9i) on Windows
3) OID release 184.108.40.206.0 (shipping with Oracle8i) on Solaris
Download the patchset for your platform from Oracle's Worldwide Support web site, Metalink, http://metalink.oracle.com.
The patch number for OID release 220.127.116.11.0 is 1888945
The patch number for OID release 18.104.22.168.0 is 1888998