Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.
http://www.securityfocus.com/bid/3726
http://www.securityfocus.com/archive/1/246663
http://www.kb.cert.org/vuls/id/500203