SecuritySpace - CVE-2014-6567

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-6567

Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-6567
BugTraq ID: 72134
http://www.securityfocus.com/bid/72134
http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdf
http://www.securitytracker.com/id/1031572

CVE ID:	CVE-2014-6567
Description:	Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that this is a stack-based buffer overflow in DBMS_AW.EXECUTE, which allows code execution via a long Current Directory Alias (CDA) command.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6567 BugTraq ID: 72134 http://www.securityfocus.com/bid/72134 http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdf http://www.securitytracker.com/id/1031572