Oracle Database 10gR1 suffers from a buffer overflow in VERIFY_LOG procedure (DB03) Oracle Database Server provides the DBMS_SNAPSHOT_UTL package that includes capability to manage materialized views. This package contains the public procedure VERIFY_LOG that is vulnerable to buffer overflow. By default DBMS_SNAPSHOT_UTL has EXECUTE permission to PUBLIC so any Oracle database user can exploit this vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45844/oracle-10gR1.txt
Source: https://packetstormsecurity.com/files/45844/oracle-10gR1.txt.html