PT-2007-2836 · Oracle · Oracle Database 10G

Publicado 2007-03-14 · Atualizado 2008-11-15 · CVE-2007-1442

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database 10g

Description The issue allows local users to gain privileges due to the use of a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs).

Recommendations For Oracle Database 10g, consider restricting access to sensitive resources and implementing additional security measures to minimize the risk of exploitation, as there is no information provided about a specific fix or patch for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1442

Produtos afetados

Oracle Database 10G

Referências · 6

• 🔥 http://securityfocus.com/bid/22905 · Exploit
• http://osvdb.org/33979 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1442 · Nota de Segurança
• http://argeniss.com/research/10MinSecAudit.zip · Nota
• http://secunia.com/advisories/24475 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1442 · Nota