PT-2007-6535 · Oracle · Oracle Workspace Manager

David Litchfield · Publicado 2007-10-17 · Atualizado 2018-10-15 · CVE-2007-5511

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle Workspace Manager versions prior to 10.2.0.4.1 Oracle Workspace Manager versions prior to 10.1.0.8.0 Oracle Workspace Manager versions prior to 9.2.0.8.0

Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package.

Recommendations: For versions prior to 10.2.0.4.1, update to version 10.2.0.4.1 or later. For versions prior to 10.1.0.8.0, update to version 10.1.0.8.0 or later. For versions prior to 9.2.0.8.0, update to version 9.2.0.8.0 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-5511

Produtos afetados

Oracle Workspace Manager

Referências · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/lt_findricset_cursor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/4570 · Exploit
• 🔥 https://exploit-db.com/exploits/4571 · Exploit
• 🔥 https://exploit-db.com/exploits/4572 · Exploit
• http://securitytracker.com/id?1018823 · Nota
• http://securityreason.com/securityalert/3245 · Nota
• http://vupen.com/english/advisories/2007/3626 · Nota
• http://marc.info/?l=bugtraq&m=119332677525918&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/3524 · Nota
• http://securityfocus.com/bid/26098 · Nota
• http://osvdb.org/40079 · Nota
• http://secunia.com/advisories/27251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-5511 · Nota de Segurança
• http://securityfocus.com/archive/1/482429/100/0/threaded · Nota
• http://secunia.com/advisories/27409 · Nota