Buffer overflow in ORACLE.EXE for Oracle Database Server 9i 8i 8.1.7 and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login as exploitable through client applications that perform their own authentication as demonstrated using LOADPSP.