PT-2007-2836 · Oracle · Oracle Database 10G

Published 2007-03-14 · Updated 2008-11-15 · CVE-2007-1442

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database 10g

Description The issue allows local users to gain privileges due to the use of a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs).

Recommendations For Oracle Database 10g, consider restricting access to sensitive resources and implementing additional security measures to minimize the risk of exploitation, as there is no information provided about a specific fix or patch for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1442

Affected Products

Oracle Database 10G

References · 6

• 🔥 http://securityfocus.com/bid/22905 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1442 · Security Note
• http://secunia.com/advisories/24475 · Vendor Advisory
• http://osvdb.org/33979 · Note
• http://argeniss.com/research/10MinSecAudit.zip · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1442 · Note