Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
BID:36744
Info
Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
| Bugtraq ID: | 36744 |
| Class: | Unknown |
| CVE: |
CVE-2009-1994 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2009 12:00AM |
| Updated: | Oct 20 2009 10:58PM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.1 .5 |
| Not Vulnerable: | |
Discussion
Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
Oracle Database is prone to a remote vulnerability in Oracle Spatial.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Execute on MDSYS.PRVT_CMT_CBK' privileges.
This vulnerability affects 10.1.0.5.
Oracle Database is prone to a remote vulnerability in Oracle Spatial.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Execute on MDSYS.PRVT_CMT_CBK' privileges.
This vulnerability affects 10.1.0.5.
Exploit / POC
Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Oracle Database CVE-2009-1994 Remote Oracle Spatial Vulnerability
References:
References: