Description
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2007-3838 | Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow. |
References
History
No history.
Subscriptions
Oracle
Subscribe
Apex
Subscribe
Application Server
Subscribe
Collaboration Suite
Subscribe
Database Server
Subscribe
E-business Suite
Subscribe
Peoplesoft Enterprise Customer Relationship Management
Subscribe
Peoplesoft Enterprise Human Capital Management
Subscribe
Peoplesoft Enterprise Peopletools
Subscribe
Secure Enterprise Search
Subscribe
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T14:28:52.639Z
Reserved: 2007-07-18T00:00:00.000Z
Link: CVE-2007-3854
No data.
Status : Modified
Published: 2007-07-18T19:30:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-3854
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD