Oracle Advanced Replication 'REPCAT_RPC.VALIDATE_REMOTE_RC()' Privilege Escalation Vulnerability

Bugtraq ID:	35685
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-1021
Remote:	Yes
Local:	No
Published:	Jul 14 2009 12:00AM
Updated:	Aug 25 2009 10:52PM
Credit:	Oracle
Vulnerable:	Oracle Oracle9i Standard Edition 9.2 .8DV Oracle Oracle9i Standard Edition 9.2 .8 Oracle Oracle9i Personal Edition 9.2 .8DV Oracle Oracle9i Personal Edition 9.2 .8 Oracle Oracle9i Enterprise Edition 9.2 .8DV Oracle Oracle9i Enterprise Edition 9.2 .8.0 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5
Not Vulnerable:

Oracle Advanced Replication 'REPCAT_RPC.VALIDATE_REMOTE_RC()' Privilege Escalation Vulnerability

Oracle Advanced Replication is prone to a remote privilege-escalation vulnerability that can be exploited over the 'Oracle Net' protocol. An attacker must have 'Create Session' privileges to exploit this issue.

Oracle Advanced Replication 'REPCAT_RPC.VALIDATE_REMOTE_RC()' Privilege Escalation Vulnerability

A proof of concept is available; please see the references for more information.

Oracle Advanced Replication 'REPCAT_RPC.VALIDATE_REMOTE_RC()' Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for details.

Oracle Advanced Replication 'REPCAT_RPC.VALIDATE_REMOTE_RC()' Privilege Escalation Vulnerability

References:

• Exploiting PL/SQL Injection Flaws with only CREATE SESSION Privileges (David Litchfield)
  
• Oracle Critical Patch Update Pre-Release Announcement - July 2009 (Oracle)
  
• Oracle PL/SQL Injection Flaw in REPCAT_RPC.VALIDATE_REMOTE_RC ("David Litchfield" )
  
• Oracle Critical Patch Update Advisory - July 2009 (Oracle)