Test Kennung:	1.3.6.1.4.1.25623.1.0.802522
Kategorie:	Databases
Titel:	Oracle Database Server Multiple Components Multiple Vulnerabilities
Zusammenfassung:	Oracle database is prone to multiple vulnerabilities.
Beschreibung:	Summary: Oracle database is prone to multiple vulnerabilities. Vulnerability Insight: Flaw is due to: - An unspecified errors in DataGuard, PL/SQL and Spatial components. - An error in SQL compiler, allows a remote attacker with 'Create Session' privileges on the SQL Compiler component to perform unauthorized inserts, updates, and deletes in the database using specially-crafted views. Vulnerability Impact: Successful exploitation allows remote authenticated users to execute arbitrary SQL commands via unknown vectors. Affected Software/OS: Oracle Database server versions 9.0.1.5, 9.2.0.8, 9.2.0.8DV, 10.1.0.5 and 10.2.0.3 Solution: Apply the patch from the referenced advisory. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3855 Bugtraq: 20070718 Oracle Security: Insert / Update / Delete Data via Views (Google Search) http://www.securityfocus.com/archive/1/473997/100/0/threaded Bugtraq: 20070721 Oracle bad Views - Exploit released (Google Search) http://www.securityfocus.com/archive/1/474326/100/0/threaded Cert/CC Advisory: TA07-200A http://www.us-cert.gov/cas/techalerts/TA07-200A.html HPdes Security Advisory: HPSBMA02133 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 HPdes Security Advisory: SSRT061201 http://rawlab.mindcreations.com/codes/exp/oracle/bunkerview.sql http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html http://www.red-database-security.com/advisory/oracle_view_vulnerability.html http://www.securitytracker.com/id?1018415 http://secunia.com/advisories/26114 http://secunia.com/advisories/26166 http://securityreason.com/securityalert/2903 http://www.vupen.com/english/advisories/2007/2562 http://www.vupen.com/english/advisories/2007/2635 XForce ISS Database: oracle-cpu-july2007(35490) https://exchange.xforce.ibmcloud.com/vulnerabilities/35490 XForce ISS Database: oracle-unauth-view-access(35495) https://exchange.xforce.ibmcloud.com/vulnerabilities/35495
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.