CVE Vulnerabilities

CVE-2007-3855

Published: Jul 18, 2007 | Modified: Oct 15, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.

Affected Software

Name Vendor Start Version End Version
Database_server Oracle 9.2.0.8 9.2.0.8
Database_server Oracle 9.2.0.8dv 9.2.0.8dv
Database_server Oracle 9.0.1.5 9.0.1.5
Database_server Oracle 10.2.0.3 10.2.0.3
Database_server Oracle 10.1.0.5 10.1.0.5

References