The Metalink article in 'News and Notes' says:
"22-OCT-03: . . . . . . Oracle 8i Database Release 8.1.x and earlier proved not vulnerable."