PT-2007-1750 · Oracle · Oracle Database

Published 2007-01-17 · Updated 2017-07-29 · CVE-2007-0278

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5

Description: The issue concerns unspecified vulnerabilities in Oracle Database related to (1) NLS Runtime and lmsgen (DB12), and (2) Oracle Text and ctxkbtc (DB14). The impact and attack vectors of these vulnerabilities are unknown.

Recommendations: For Oracle Database version 8.1.7.4, update to a version that addresses these issues. For Oracle Database version 9.0.1.5, update to a version that addresses these issues. For Oracle Database version 9.2.0.7, update to a version that addresses these issues. For Oracle Database version 10.1.0.5, update to a version that addresses these issues.

Fix

Related Identifiers

CVE-2007-0278

Affected Products

Oracle Database

References · 10

• http://secunia.com/advisories/23794 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA07-017A.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-0278 · Security Note
• http://securityfocus.com/bid/22083 · Note
• http://securitytracker.com/id?1017522 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0278 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31541 · Note
• http://osvdb.org/32920 · Note
• http://osvdb.org/32918 · Note
• http://oracle.com/technetwork/topics/security/cpujan2007-101493.html · Note