ID CVE-2013-3771
Summary Unspecified vulnerability in the Oracle executable component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-3760.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 29-08-2017 - 01:33)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 61211
confirm http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
osvdb 95266
sectrack 1028789
suse SUSE-SU-2013:1448
xf oracle-cpujuly2013-cve20133771(85653)
Last major update 29-08-2017 - 01:33
Published 17-07-2013 - 13:41
Last modified 29-08-2017 - 01:33
Back to Top