PT-2009-4424 · Oracle · Oracle Database

Publicado 2009-07-14 · Atualizado 2017-08-17 · CVE-2009-1969

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:N/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 9.2.0.8 through 11.1.0.7

Description: The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it. Details about the exploitation vectors are not specified. It is also reported that the current Oracle version has multiple issues that enable remote attackers to bypass security restrictions, execute arbitrary SQL commands, and access sensitive data.

Recommendations: For Oracle Database versions 9.2.0.8 through 11.1.0.7, update to a version that includes the necessary security patches to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-1969

Produtos afetados

Oracle Database

Referências · 9

• http://oracle.com/technetwork/topics/security/cpujul2009-091332.html · Nota
• http://securityfocus.com/bid/35689 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51755 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1969 · Nota de Segurança
• http://securitytracker.com/id?1022560 · Nota
• http://secunia.com/advisories/35776 · Nota
• http://vupen.com/english/advisories/2009/1900 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1969 · Nota
• http://osvdb.org/55894 · Nota