Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability

Bugtraq ID:	50219
Class:	Unknown
CVE:	CVE-2011-3511
Remote:	Yes
Local:	No
Published:	Oct 19 2011 12:00AM
Updated:	Oct 21 2011 06:01PM
Credit:	TeamSHATTER
Vulnerable:	Oracle Oracle11g Enterprise Edition 11.2.0.2.0 Oracle Oracle10g Standard Edition 10.2 .5 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.2 .2 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2 .5 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.2 .1 Oracle Oracle10g Enterprise Edition 11.2.0.2
Not Vulnerable:

Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability

Oracle Database Server is prone to a remote security-bypass vulnerability in Database Vault.

The vulnerability can be exploited over the 'Oracle Net' protocol. For an exploit to succeed, the attacker must have 'Privileged Account' privileges.

An attacker can exploit this issue to bypass certain security protections and change any user's password. Successfully exploiting this issue may lead to other attacks.

This vulnerability affects the following supported versions:
10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2

Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability

References:

• Database Vault Account Management VulnerabilitesTeam Shatter Exclusive (TEAMShatter)
  
• Oracle Critical Patch Update Advisory - October 2011 (Oracle)