CVE-2007-2113
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.046 Low
EPSS
Percentile
92.4%
SQL injection vulnerability in the Upgrade/Downgrade component (DBMS_UPGRADE_INTERNAL) for Oracle Database 10.1.0.5 allows remote authenticated users to execute arbitrary SQL commands via unknown vectors, aka DB07. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB07 is actually for multiple issues.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:database_server | oracle database server | eq | 10.1.0.5 |
References
www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf
www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html
www.red-database-security.com/advisory/oracle_cpu_apr_2007.html
www.red-database-security.com/advisory/oracle_sql_injection_dbms_upgrade_internal.html
www.securityfocus.com/archive/1/466153/100/0/threaded
www.securityfocus.com/archive/1/466329/100/200/threaded
www.securityfocus.com/bid/23532
www.securitytracker.com/id?1017927
www.us-cert.gov/cas/techalerts/TA07-108A.html
www.vupen.com/english/advisories/2007/1426
Social References
More
Related
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.046 Low
EPSS
Percentile
92.4%