CVE-2008-3974

CVE-2008-3974 concerns a buffer overflow in Oracle Database’s OLAP SYS.OLAPIMPL_T ODCITABLESTART procedure. Exploitation requires a user with EXECUTE privilege on SYS.OLAPIMPL_T and remote access to the Oracle server; a crafted SQL statement can allow arbitrary code execution or DoS on vulnerable...

CVE-2008-4015

CVE-2008-4015 affects Oracle Database 10.1.0.5 in the Oracle Streams component, with the vulnerability related to SYS.DBMS_STREAMS_AUTH, allowing remote authenticated users to impact confidentiality and integrity. The issue is documented with a CVSS v2 base score of 5.5 (Network attack, low compl...

CVE-2008-5439

CVE-2008-5439 concerns Oracle Database 10.2.0.4, specifically the SQL*Plus Windows GUI component. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality via unknown vectors. The NVD entry assigns a CVSS v2 base score of 4.0 (Medium) with netwo...

Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability

Exploit for multiple platform in category remote exploits ================================================================== Oracle Secure Backup 10g execqr Command Injection Vulnerability ================================================================== Oracle Secure Backup 10g Remote Code...

CVE-2008-5437: Undefined Security Weakness

Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMSIJOB...

CVE-2008-5439: Undefined Security Weakness

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2008-5436: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2008-3979: Undefined Security Weakness

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on...

CVE-2008-3974: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPLT...

CVE-2008-3997: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect availability, related to SYS.DBMSXSOQODBO...

CVE-2008-3999: Undefined Security Weakness

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPLT...

CVE-2008-3973: Undefined Security Weakness

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors...

CVE-2008-5440: Undefined Security Weakness

Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on...

CVE-2008-3978: Undefined Security Weakness

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2008-4015: Undefined Security Weakness

Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSSTREAMSAUTH...

Hack sniper Oracle system of eight routines-vulnerabilities and early warning-the black bar safety net

Description Oracle sales to customers peddling their database system has been put it touted as unbreakable, and pay lip service Easy cash up may not be so easy. Regardless of what the computer system, the people can always be found to attack it, Oracle is no exception. This article and everyone...

OraMon config/oramon.ini Information Disclosure

The remote host is running OraMon, an Oracle database monitoring tool written in PHP. The OraMon installation on the remote host stores its configuration file in the web document directory and fails to restrict access to it. An unauthenticated attacker can retrieve it and discover sensitive...

oramon-disclose.txt

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...

OraMon 2.0.1 - Remote Configuration File Disclosure

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...