Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
BID:36742
Info
Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
| Bugtraq ID: | 36742 |
| Class: | Unknown |
| CVE: |
CVE-2009-1992 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2009 12:00AM |
| Updated: | Oct 20 2009 10:48PM |
| Credit: | Yaniv Azaria of Imperva, Inc.; Cesar Cerrudo of Argeniss; Deniz Cevik of Intellect; Joxean Koret; Joxean Koret of iSIGHT Partners Global Vulnerability Partnership; Alexander Kornbrust of Red Database Security; David Litchfield of NGS Software; Ryan Permeh |
| Vulnerable: |
Oracle Oracle9i Standard Edition 9.2 .8DV Oracle Oracle9i Standard Edition 9.2 .8 Oracle Oracle9i Personal Edition 9.2 .8DV Oracle Oracle9i Personal Edition 9.2 .8 Oracle Oracle9i Enterprise Edition 9.2 .8DV Oracle Oracle9i Enterprise Edition 9.2 .8.0 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.2.0.4 |
| Not Vulnerable: | |
Discussion
Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
Oracle Database is prone to a remote vulnerability in Core RDBMS.
The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't need specific privileges to exploit this vulnerability. This issue affects Oracle Database for the Microsoft Windows platform.
This vulnerability affects the following supported versions:
9.2.0.8
10.1.0.5
10.2.0.4
Oracle Database is prone to a remote vulnerability in Core RDBMS.
The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't need specific privileges to exploit this vulnerability. This issue affects Oracle Database for the Microsoft Windows platform.
This vulnerability affects the following supported versions:
9.2.0.8
10.1.0.5
10.2.0.4
Exploit / POC
Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Oracle Database CVE-2009-1992 Remote Core RDBMS Vulnerability
References:
References: