The vulnerability exists in code responsible for handling Create Database Link queries, which enable one Oracle database to query information stored in another database, according to security ...

For the most part, Oracle is an innocent bystander ... He also warns that the code can be used to create database links and try to guess passwords for additional databases on a network.