Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2007-3855
HistoryJul 18, 2007 - 7:30 p.m.

Design/Logic Flaw

2007-07-1819:30:00
PRIOn knowledge base
www.prio-n.com
2

6.9 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.936 High

EPSS

Percentile

99.0%

JSON

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.

References

Related

exploitpack 2
openvas 1
checkpoint_advisories 1
packetstorm 1
seebug 3
cve 1
exploitdb 2
securityvulns 1
nessus 1
exploitpack
exploitpack
Oracle Database - SQL Compiler Views Unauthorized Manipulation
2007-07-12 00:00:00
Oracle 9i10g - Evil Views Change Passwords
2007-07-19 00:00:00
openvas
openvas
Oracle Database Server Multiple Components Multiple Vulnerabilities
2011-12-07 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Database SQL Compiler Access Control Security Bypass (CVE-2007-3855)
2010-06-27 00:00:00
packetstorm
packetstorm
bunkerview.txt
2007-07-20 00:00:00
seebug
seebug
Oracle 9i/10g Evil Views - Change Passwords Exploit
2014-07-01 00:00:00
Oracle Database SQL Compiler Views Unauthorized Manipulation
2014-07-01 00:00:00
Oracle 9i/10g evil views Change Passwords Exploit (CVE-2007-3855)
2007-07-20 00:00:00
cve
cve
CVE-2007-3855
2007-07-18 19:30:00
exploitdb
exploitdb
Oracle 9i/10g - Evil Views Change Passwords
2007-07-19 00:00:00
Oracle Database - SQL Compiler Views Unauthorized Manipulation
2007-07-12 00:00:00
securityvulns
securityvulns
Oracle multiple security vulnerabilities
2007-07-24 00:00:00
nessus
nessus
Oracle Database Multiple Vulnerabilities (July 2007 CPU)
2011-11-16 00:00:00

6.9 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.936 High

EPSS

Percentile

99.0%

JSON
Related for PRION:CVE-2007-3855
exploitpack2openvas1checkpoint_advisories1packetstorm1seebug3cve1exploitdb2securityvulns1nessus1