CVSS: 6.5EPSS: 92%CPEs: 5EXPL: 2CVE-2007-3855 – Oracle 9i/10g - Evil Views Change Passwords
https://notcve.org/view.php?id=CVE-2007-3855
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions. Multiples vulnerabilidades no especificadas en Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, y 10.2.0.3 permiten a atacantes remotos autenticados tener un impacto desconocido mediante (1) SYS.DBMS_DRS en el componente DataGuard (DB03), (2) SYS.DBMS_STANDARD en el componente PL/SQL (DB10), (3) MDSYS.RTREE_IDX en el componente Spatial (DB16), y (4) SQL Compiler (DB17). NOTA: Un investigador fiable indica que DB17 es para utilizar Vistas para realizar inserciones no autorizadas, actualizaciones, o acciones de borrado. • https://www.exploit-db.com/exploits/4203 https://www.exploit-db.com/exploits/30295 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 http://rawlab.mindcreations.com/codes/exp/oracle/bunkerview.sql http://secunia.com/advisories/26114 http://secunia.com/advisories/26166 http://securityreason.com/securityalert/2903 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf http://www.oracle.com/technetwork/topics •
CVSS: 6.5EPSS: 3%CPEs: 1EXPL: 0CVE-2007-3857
https://notcve.org/view.php?id=CVE-2007-3857
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1) unspecified vectors (DB05), (2) CTXSYS.DRVXMD (DB06), (3) CTXSYS.DRI_MOVE_CTXSYS (DB07), (4) CTXSYS.DRVXMD (DB08), and (b) JavaVM (DB14). Múltiples vulnerabilidades no especificadas en Oracle Database 10.1.0.5 permite a usuarios remotos validados tienen un impacto desconocido a través del componente (1) Oracle Text, incluidos (1) vectores no especificados (DB05), (2) CTXSYS.DRVXMD (DB06), (3) CTXSYS.DRI_MOVE_CTXSYS (DB07), (4) CTXSYS.DRVXMD (DB08), y (b) JavaVM (DB14). • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143 http://secunia.com/advisories/26114 http://secunia.com/advisories/26166 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html http://www.securitytracker.com/id?1018415 http://www.us-cert.gov/cas/techalerts/TA07-200A •
CVSS: 6.0EPSS: 0%CPEs: 1EXPL: 0CVE-2007-2109
https://notcve.org/view.php?id=CVE-2007-2109
Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) Rules Manager and Expression Filter components (DB02) and (2) Oracle Streams (DB06). Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a race condition in the RLMGR_TRUNCATE_MAINT trigger in the Rules Manager and Expression Filter components changing the AUTHID of a package from DEFINER to CURRENT_USER after a TRUNCATE call, and DB06 is for SQL injection in the DBMS_APPLY_USER_AGENT.SET_REGISTRATION_HANDLER procedure, which is later passed to the DBMS_APPLY_ADM_INTERNAL.ALTER_APPLY procedure, aka "Oracle Streams". Múltiples vulnerabilidades no especificadas en Oracle Database versión 10.2.0.3 tienen un impacto desconocido y vectores de ataque autenticados remotos relacionados con los componentes (1) Rules Manager y Expression Filter (DB02) y (2) Oracle Streams (DB06). Nota: a partir de 24-04-2007, Oracle no ha cuestionado las afirmaciones confiables que DB02 es para una condición de carrera es el activador RLMGR_TRUNCATE_MAINT en los componentes de Rules Manager and Expression Filter cambiando el AUTHID de un paquete de DEFINER a CURRENT_USER después de una llamada TRUNCATE y DB06 es para la inyección SQL en el procedimiento DBMS_APPLY_USER_AGENT.SET_REGISTRATION_HANDLER, que más tarde es pasado al procedimiento DBMS_APPLY_ADM_INTERNAL.ALTER_APPLY, también se conoce como "Oracle Streams". • http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus.com/bid/23532 http://www.securitytracker.com/id?1017927 http://www.us-cert.gov/cas/techalerts/ •
CVSS: 6.8EPSS: 41%CPEs: 5EXPL: 0CVE-2007-2108
https://notcve.org/view.php?id=CVE-2007-2108
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka DB01. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue occurs because the NTLM SSPI AcceptSecurityContext function grants privileges based on the username provided even though all users are authenticated as Guest, which allows remote attackers to gain privileges. Una vulnerabilidad no especificada en el componente Core RDBMS en Oracle Database versiones 9.0.1.5, 9.2.0.8, 10.1.0.5 y 10.2.0.2 en Windows permite a los atacantes remotos tener un impacto desconocido, también se conoce como DB01. NOTA: a partir de 24-04-2007, Oracle no ha cuestionado las afirmaciones confiables de que este problema se produce porque la función NTLM SSPI AcceptSecurityContext concede privilegios basados en el nombre de usuario proporcionado, aunque todos los usuarios se autentican como invitado, lo que permite el control remoto atacantes para alcanzar privilegios. • http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf http://www.kb.cert.org/vuls/id/809457 http://www.ngssoftware.com/papers/database-on-xp.pdf http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus. • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.0EPSS: 2%CPEs: 2EXPL: 0CVE-2007-2112
https://notcve.org/view.php?id=CVE-2007-2112
Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547. Vulnerabilidad no especificada en el componente de autenticación para Oracle Database las versiones 10.1.0.5 y 10.2.0.3 tiene un impacto desconocido y vectores de ataque, también se conoce como DB05. NOTA: a partir de 24-04-2007, Oracle no ha cuestionado las afirmaciones confiables de que este problema les permite a los usuarios autenticados remotos omitir las políticas de seguridad AUTH_ALTER_SESSION por medio de un desencadenante de inicio de sesión ("DESPUÉS DE INICIAR SESIÓN" en la directiva de activación), un problema relacionado con CVE-2006-0547. • http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/bypass_oracle_logon_trigger.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securityfocus.com/archive/1/466151/100/0/threaded http://www.securityfocus.com/archive/1/466329/100&#x •