Oracle Database Multiple Vulnerabilities (October 2009 CPU)

The remote Oracle database server is missing the October 2009 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Application Express - Auditing - Authentication - Core RDBMS - Data Mining - Data Pump - Network...

Oracle Database Multiple Vulnerabilities (January 2006 CPU)

The remote Oracle database server is missing the January 2006 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Change Data Capture - Connection Manager - Data Pump - Data Pump Metadata API - Dictionary - Java Net...

Oracle Database Multiple Vulnerabilities (January 2010 CPU)

The remote Oracle database server is missing the January 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Listener - Oracle OLAP - Application Express Application Builder - Oracle Data Pump - Oracle Spatial - Logical Standby -...

CVE-2009-3411

Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3411

CVE-2009-3411 (Oracle Data Pump) affects Oracle Database components including Data Pump across multiple versions (11.1.0.7; 10.2.0.3/0.4; 10.1.0.5; 9.2.0.8/9.2.0.8DV). The vulnerability allows remote authenticated users to impact confidentiality and integrity via unknown vectors due to an unspeci...

CVE-2009-3411

Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3411: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Oracle Database SYS.KUPW-WORKER Package MAIN Procedure SQL Injection (CVE-2006-3698)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

CVE-2009-1971

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-1971

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-1971

CVE-2009-1971 affects Oracle Database Data Pump in 10.1.0.5, 10.2.0.3, and 11.1.0.7. Root cause and vectors are not described in the Initial Document, but the vulnerability allows remote authenticated users to affect integrity via unknown vectors. The issue is acknowledged in the Oracle October 2...

CVE-2009-1971: Undefined Security Weakness

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2008-2608

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILEINT...

Design/Logic Flaw

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMPFULLDATABASE role...

Design/Logic Flaw

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILEINT...

CVE-2008-2602

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMPFULLDATABASE role...

CVE-2008-2608

CVE-2008-2608 affects Oracle Database 10.1.0.5 and 10.2.0.3 Data Pump, involving SYS.KUPF$FILE_INT. The vulnerability is exploitable via Oracle Net with Execute on SYS.KUPF$FILE_INT and requires authentication; impact is tied to availability (per CVSS data: Network, Low complexity, Single auth, P...

CVE-2008-2602

CVE-2008-2602 is an Oracle Database Data Pump vulnerability affecting 10.1.0.5, 10.2.0.4, and 11.1.0.6. The issue involves remote authenticated access via the IMP_FULL_DATABASE role. The impact is not specified in the CVE description. The issue is listed in the July 2008 Critical Patch Update (CP...