EUVD-2007-0271

Malware in sbrugna...

CVE-2005-4832

The CVE-2005-4832 entry concerns SQL injection in Oracle Database Server 10g impacting the SYS.DBMS_CDC_SUBSCRIBE and SYS.DBMS_CDC_ISUBSCRIBE packages, via the SUBSCRIPTION_NAME parameter. Connected sources confirm remote authenticated exploitation that can lead to arbitrary SQL execution with el...

CVE-2005-4832: Undefined Security Weakness

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTIONNAME parameter in the 1 SYS.DBMSCDCSUBSCRIBE and 2 SYS.DBMSCDCISUBSCRIBE packages, a different vector than CVE-2005-1197...

CVE-2007-0269

Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture and sys.dbmscdcsubscribe privileges, aka DB02...

CVE-2007-0269: Undefined Security Weakness

Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture and sys.dbmscdcsubscribe privileges, aka DB02...