PT-2007-5088 · Oracle · Oracle Database+1

Published 2007-07-18 · Updated 2017-07-29 · CVE-2007-3857

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle Database version 10.1.0.5

Description: The issue affects Oracle Database, allowing remote authenticated users to have an unknown impact. This is due to unspecified vulnerabilities in the Oracle Text component, including vectors related to CTXSYS.DRVXMD, CTXSYS.DRI MOVE CTXSYS, and JavaVM.

Recommendations: For Oracle Database version 10.1.0.5, consider restricting access to the Oracle Text component and JavaVM until a fix is available. As a temporary workaround, disabling the use of CTXSYS.DRVXMD and CTXSYS.DRI MOVE CTXSYS may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-3857

Affected Products

Javavm

Oracle Database

References · 13

• http://secunia.com/advisories/26114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3857 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA07-200A.html · Note
• http://vupen.com/english/advisories/2007/2635 · Note
• http://integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf · Note
• http://oracle.com/technetwork/topics/security/cpujul2007-087014.html · Note
• http://red-database-security.com/advisory/oracle_cpu_jul_2007.html · Note
• http://vupen.com/english/advisories/2007/2562 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3857 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35490 · Note
• http://secunia.com/advisories/26166 · Note
• http://securitytracker.com/id?1018415 · Note