Oracle Database Server version 10g has a flaw that allows any low privileged database user to execute functions with DBA privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37739/AppSecInc.oracleSQL.txt
Source: https://packetstormsecurity.com/files/37739/AppSecInc.oracleSQL.txt.html