PT-2005-4235 · Oracle · Oracle 10G Database Server

Published 2005-11-02 · Updated 2012-10-23 · CVE-2005-3439

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database Server 10g versions up to 10.1.0.4.2

Description The issue affects Oracle Database Server 10g and involves multiple unspecified vulnerabilities with unknown impact and attack vectors. These vulnerabilities are located in various components, including Change Data Capture, Data Pump Export, and the Spatial component.

Recommendations For Oracle Database Server 10g versions up to 10.1.0.4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3439

Affected Products

Oracle 10G Database Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3439 · Security Note
• http://secunia.com/advisories/17250 · Note
• http://kb.cert.org/vuls/id/210524 · Note
• http://us-cert.gov/cas/techalerts/TA05-292A.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3439 · Note
• http://securityfocus.com/bid/15134 · Note
• http://oracle.com/technetwork/topics/security/cpuoct2005-090497.html · Note