PT-2005-5493 · Oracle · Oracle 10G Database Server

Publicado 2005-12-31 · Atualizado 2017-07-29 · CVE-2005-4832

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database Server 10g

Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands with elevated privileges. This is achieved via the SUBSCRIPTION NAME parameter in the (1) SYS.DBMS CDC SUBSCRIBE and (2) SYS.DBMS CDC ISUBSCRIBE packages.

Recommendations For Oracle Database Server 10g, avoid using the SUBSCRIPTION NAME parameter in the SYS.DBMS CDC SUBSCRIBE and SYS.DBMS CDC ISUBSCRIBE packages until a fix is available. As a temporary workaround, consider restricting access to these packages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-4832

Produtos afetados

Oracle 10G Database Server

Referências · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/dbms_cdc_subscribe_activate_subscription.rb · Exploit
• 🔥 https://exploit-db.com/exploits/25452 · Exploit
• 🔥 https://exploit-db.com/exploits/25453 · Exploit
• 🔥 http://securityfocus.com/archive/1/396133 · Exploit
• 🔥 http://securityfocus.com/archive/1/404970 · Exploit
• 🔥 https://exploit-db.com/exploits/3378 · Exploit
• 🔥 http://argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt · Exploit
• 🔥 http://appsecinc.com/resources/alerts/oracle/2005-02.html · Exploit
• 🔥 http://argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql · Exploit
• 🔥 https://exploit-db.com/exploits/3364 · Exploit
• http://securityfocus.com/bid/13236 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4832 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20159 · Nota
• http://oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf · Aviso do Fabricante