PT-2009-4424 · Oracle · Oracle Database

Published 2009-07-14 · Updated 2017-08-17 · CVE-2009-1969

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 9.2.0.8 through 11.1.0.7

Description: The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it. Details about the exploitation vectors are not specified. It is also reported that the current Oracle version has multiple issues that enable remote attackers to bypass security restrictions, execute arbitrary SQL commands, and access sensitive data.

Recommendations: For Oracle Database versions 9.2.0.8 through 11.1.0.7, update to a version that includes the necessary security patches to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-1969

Affected Products

Oracle Database

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2009-1969 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2009-091332.html · Note
• http://securityfocus.com/bid/35689 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51755 · Note
• http://securitytracker.com/id?1022560 · Note
• http://secunia.com/advisories/35776 · Note
• http://vupen.com/english/advisories/2009/1900 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1969 · Note
• http://osvdb.org/55894 · Note