PT-2005-5493 · Oracle · Oracle 10G Database Server

Published 2005-12-31 · Updated 2017-07-29 · CVE-2005-4832

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database Server 10g

Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands with elevated privileges. This is achieved via the SUBSCRIPTION NAME parameter in the (1) SYS.DBMS CDC SUBSCRIBE and (2) SYS.DBMS CDC ISUBSCRIBE packages.

Recommendations For Oracle Database Server 10g, avoid using the SUBSCRIPTION NAME parameter in the SYS.DBMS CDC SUBSCRIBE and SYS.DBMS CDC ISUBSCRIBE packages until a fix is available. As a temporary workaround, consider restricting access to these packages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2005-4832

Affected Products

Oracle 10G Database Server

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/dbms_cdc_subscribe_activate_subscription.rb · Exploit
• 🔥 https://exploit-db.com/exploits/25452 · Exploit
• 🔥 https://exploit-db.com/exploits/25453 · Exploit
• 🔥 http://securityfocus.com/archive/1/396133 · Exploit
• 🔥 http://securityfocus.com/archive/1/404970 · Exploit
• 🔥 https://exploit-db.com/exploits/3378 · Exploit
• 🔥 http://argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt · Exploit
• 🔥 http://appsecinc.com/resources/alerts/oracle/2005-02.html · Exploit
• 🔥 http://argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql · Exploit
• 🔥 https://exploit-db.com/exploits/3364 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4832 · Security Note
• http://oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf · Vendor Advisory
• http://securityfocus.com/bid/13236 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20159 · Note