Lucene search

K
cve[email protected]CVE-2007-0274
HistoryJan 17, 2007 - 2:28 a.m.

CVE-2007-0274

2007-01-1702:28:00
web.nvd.nist.gov
24
cve-2007-0274
oracle
database
vulnerabilities
unknown impact
attack vectors
buffer overflow
oracle streams
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%

Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbms_logrep_util (DB08), and (2) Oracle Streams and sys.dbms_capture_adm_internal privileges (DB09). NOTE: Oracle has not disputed reliable researcher claims that DB08 is for a buffer overflow in the GET_OBJECT_NAME procedure in the DBMS_LOGREP_UTIL package, and DB09 is for buffer overflows in the CREATE_CAPTURE, ALTER_CAPTURE, and ABORT_TABLE_INSTANTIATION procedures in SYS.DBMS_CAPTURE_ADM_INTERNAL.

Affected configurations

NVD
Node
oracledatabase_serverMatch9.2.0.7
OR
oracledatabase_serverMatch10.1.0.5

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%