Remote Authentication Vulnerability in Oracle Database by Oracle
CVE-2009-0985

Currently unrated

Key Information:

Vendor
Oracle
Status
Database 10g
Database 11g
Vendor
CVE Published:
15 April 2009

Summary

An unspecified vulnerability exists in the Core RDBMS component of Oracle Database that can be exploited by remote authenticated users with the IMP_FULL_DATABASE role. This flaw can potentially compromise the confidentiality, integrity, and availability of the database system, leading to unauthorized access and manipulation of sensitive information.

References

http://www.securityfocus.com/bid/34461
vdb-entryx_refsource_BID
http://secunia.com/advisories/34693
third-party-advisoryx_refsource_SECUNIA
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
third-party-advisoryx_refsource_CERT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.