PT-2007-5088 · Oracle · Oracle Database+1

Publicado 2007-07-18 · Atualizado 2017-07-29 · CVE-2007-3857

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle Database version 10.1.0.5

Description: The issue affects Oracle Database, allowing remote authenticated users to have an unknown impact. This is due to unspecified vulnerabilities in the Oracle Text component, including vectors related to CTXSYS.DRVXMD, CTXSYS.DRI MOVE CTXSYS, and JavaVM.

Recommendations: For Oracle Database version 10.1.0.5, consider restricting access to the Oracle Text component and JavaVM until a fix is available. As a temporary workaround, disabling the use of CTXSYS.DRVXMD and CTXSYS.DRI MOVE CTXSYS may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-3857

Produtos afetados

Javavm

Oracle Database

Referências · 13

• http://secunia.com/advisories/26114 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA07-200A.html · Nota
• http://vupen.com/english/advisories/2007/2635 · Nota
• http://integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf · Nota
• http://oracle.com/technetwork/topics/security/cpujul2007-087014.html · Nota
• http://red-database-security.com/advisory/oracle_cpu_jul_2007.html · Nota
• http://vupen.com/english/advisories/2007/2562 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3857 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35490 · Nota
• http://secunia.com/advisories/26166 · Nota
• http://securitytracker.com/id?1018415 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3857 · Nota de Segurança
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 · Aviso do Fabricante