Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
BID:36759
Info
Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
| Bugtraq ID: | 36759 |
| Class: | Unknown |
| CVE: |
CVE-2009-1993 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2009 12:00AM |
| Updated: | Oct 21 2009 12:08AM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Oracle11g Standard Edition 11.1 .7 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.2.0.4 |
| Not Vulnerable: | |
Discussion
Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
Oracle Database is prone to a remote vulnerability in Application Express.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Execute on FLOWS_030000. WWV_EXECUTE_IMMEDIATE' privileges.
Oracle Database is prone to a remote vulnerability in Application Express.
The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Execute on FLOWS_030000. WWV_EXECUTE_IMMEDIATE' privileges.
Exploit / POC
Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Oracle Database CVE-2009-1993 Application Express Unspecified Vulnerability
References:
References: