Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
BID:36743
Info
Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
| Bugtraq ID: | 36743 |
| Class: | Unknown |
| CVE: |
CVE-2009-2001 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2009 12:00AM |
| Updated: | Oct 20 2009 10:38PM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Oracle11g Standard Edition 11.1 .7 Oracle Oracle11g Enterprise Edition 11.1.0.7 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2.0.4 |
| Not Vulnerable: | |
Discussion
Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
Oracle Database is prone to a remote vulnerability in PL/SQL.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Create Procedure' privileges.
This vulnerability affects the following supported versions:
10.2.0.4
11.1.0.7
Oracle Database is prone to a remote vulnerability in PL/SQL.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Create Procedure' privileges.
This vulnerability affects the following supported versions:
10.2.0.4
11.1.0.7
Exploit / POC
Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Oracle Database CVE-2009-2001 Remote PL/SQL Vulnerability
References:
References: