Oracle9i Database Server Unspecified Security Vulnerabilities

Bugtraq ID:	9705
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 20 2004 12:00AM
Updated:	Feb 20 2004 12:00AM
Credit:	Oracle has credited David Litchfield of Next Generation Security Software Ltd. with discovery of these issues.
Vulnerable:	Oracle Oracle9i Standard Edition 9.2 .0.3 Oracle Oracle9i Standard Edition 9.0.1 .5 Oracle Oracle9i Standard Edition 9.0.1 .4 Oracle Oracle9i Standard Edition 9.0 .2.4 Oracle Oracle9i Personal Edition 9.2 .0.3 Oracle Oracle9i Personal Edition 9.0.1 .5 Oracle Oracle9i Personal Edition 9.0.1 .4 Oracle Oracle9i Personal Edition 9.0 .2.4 Oracle Oracle9i Enterprise Edition 9.2 .0.3 Oracle Oracle9i Enterprise Edition 9.0.1 .5 Oracle Oracle9i Enterprise Edition 9.0.1 .4 Oracle Oracle9i Enterprise Edition 9.0 .2.4
Not Vulnerable:

Oracle9i Database Server Unspecified Security Vulnerabilities

Oracle has released an advisory reporting multiple unspecified security vulnerabilities in Oracle9i Database Server. These issues could be exploited to launch denial of service attacks or to gain unauthorized access to a user session.

These issues may be related to BID 9587, though this has not been confirmed.

Oracle9i Database Server Unspecified Security Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Oracle9i Database Server Unspecified Security Vulnerabilities

Solution:
Fixes are available via Oracle Metalink. Please see that referenced Oracle advisory for more details on how to obtain fixes.

Oracle9i Database Server Unspecified Security Vulnerabilities

References:

• Oracle Security Alert 64 (Oracle)
  
• Oracle Support Metalink (Oracle)