Description
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 ↗
- http://secunia.com/advisories/26114 ↗
- http://secunia.com/advisories/26166 ↗
- http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html ↗
- http://www.us-cert.gov/cas/techalerts/TA07-200A.html ↗
- http://securityreason.com/securityalert/2903 ↗
- http://rawlab.mindcreations.com/codes/exp/oracle/bunkerview.sql ↗
- http://www.vupen.com/english/advisories/2007/2562 ↗
- http://www.vupen.com/english/advisories/2007/2635 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35495 ↗
- http://www.red-database-security.com/advisory/oracle_view_vulnerability.html ↗
- http://www.securityfocus.com/archive/1/474326/100/0/threaded ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35490 ↗
- http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf ↗
- http://www.securitytracker.com/id?1018415 ↗
- http://www.securityfocus.com/archive/1/473997/100/0/threaded ↗
- http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html ↗