PT-2010-1287 · Oracle · Oracle Database

Publicado 2010-01-13 · Atualizado 2012-10-23 · CVE-2009-3411

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7

Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors.

Recommendations For Oracle Database version 9.2.0.8, apply the necessary patches or updates to resolve the issue. For Oracle Database version 9.2.0.8DV, apply the necessary patches or updates to resolve the issue. For Oracle Database version 10.1.0.5, apply the necessary patches or updates to resolve the issue. For Oracle Database version 10.2.0.3, apply the necessary patches or updates to resolve the issue. For Oracle Database version 10.2.0.4, apply the necessary patches or updates to resolve the issue. For Oracle Database version 11.1.0.7, apply the necessary patches or updates to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-3411

Produtos afetados

Oracle Database

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2009-3411 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-012A.html · Nota
• http://oracle.com/technetwork/topics/security/cpujan2010-084891.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3411 · Nota