PT-2005-2491 · Oracle · Oracle Database

Alexander Kornbrust · Published 2005-05-11 · Updated 2017-07-11 · CVE-2005-1495

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database versions 9i and 10g

Description The issue allows attackers to evade detection by disabling Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object.

Recommendations For Oracle Database versions 9i and 10g, consider restricting access to FGA objects to prevent unauthorized SELECT statements, which may help minimize the risk of detection evasion.

Exploit

Fix

Related Identifiers

CVE-2005-1495

Affected Products

Oracle Database

References · 7

• 🔥 http://red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1495 · Security Note
• http://marc.info/?l=bugtraq&m=111531683824209&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20407 · Note
• http://kb.cert.org/vuls/id/777773 · Note
• http://securityfocus.com/bid/16258 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1495 · Note