PT-2005-2491 · Oracle · Oracle Database

Alexander Kornbrust · Publicado 2005-05-11 · Atualizado 2017-07-11 · CVE-2005-1495

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database versions 9i and 10g

Description The issue allows attackers to evade detection by disabling Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object.

Recommendations For Oracle Database versions 9i and 10g, consider restricting access to FGA objects to prevent unauthorized SELECT statements, which may help minimize the risk of detection evasion.

Exploit

Correção

Identificadores relacionados

CVE-2005-1495

Produtos afetados

Oracle Database

Referências · 7

• 🔥 http://red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html · Exploit
• http://marc.info/?l=bugtraq&m=111531683824209&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20407 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1495 · Nota de Segurança
• http://kb.cert.org/vuls/id/777773 · Nota
• http://securityfocus.com/bid/16258 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1495 · Nota