ID CVE-2007-2110
Summary Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03).
References
Vulnerable Configurations
  • Oracle Database Server 9.0.1.5
    cpe:2.3:a:oracle:database_server:9.0.1.5
  • cpe:2.3:a:oracle:database_server:9.2.0.7
  • cpe:2.3:a:oracle:database_server:10.1.0.4
  • Microsoft Windows
    cpe:2.3:o:microsoft:windows
CVSS
Base: 4.4 (as of 15-06-2016 - 11:17)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
nessus via4
NASL family Databases
NASL id ORACLE_RDBMS_CPU_APR_2007.NASL
description The remote Oracle database server is missing the April 2007 Critical Patch Update (CPU) and therefore is potentially affected by security issues in the following components : - Adanced Queuing - Advanced Replication - Authentication - Core RDBMS - Oracle Agent - Oracle Data Capture (CDC) - Oracle Instant Client - Oracle Streams - Oracle Text - Oracle Workflow Cartridge - Rules Manager, Expressions Filter - Ultra Search - Upgrade/Downgrade
last seen 2019-02-21
modified 2018-07-18
plugin id 56056
published 2011-11-16
reporter Tenable
source https://www.tenable.com/plugins/index.php?view=single&id=56056
title Oracle Database Multiple Vulnerabilities (April 2007 CPU)
refmap via4
bid 23532
cert TA07-108A
confirm http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html
hp
  • HPSBMA02133
  • SSRT061201
misc
mlist [oracle-l] 20061201 Re: Oracle 9i on Windows 2003 -- Vulnerability Question
sectrack 1017927
vupen ADV-2007-1426
saint via4
bid 23532
description Oracle Database Advanced Replication component DBMS_SNAP_INTERNAL overflow
id database_oracle_version
osvdb 39933
title oracle_advrep_snap_internal
type remote
Last major update 15-06-2016 - 12:33
Published 18-04-2007 - 14:19
Last modified 16-10-2018 - 12:41
Back to Top