CVE-2009-0992

Currently unrated

Key Information:

Vendor
Oracle
Status
Database 10g
Database 11g
Vendor
CVE Published:
15 April 2009

Summary

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.

References

http://www.securityfocus.com/bid/34461
vdb-entryx_refsource_BID
http://secunia.com/advisories/34693
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/502723/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.