Description
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.
Affected products
- oracle / oracle9i9.0 – 9.0
- oracle / oracle9i9.0.1 – 9.0.1
References
- MISChttp://www.ciac.org/ciac/bulletins/m-071.shtml
- MISChttp://archives.neohapsis.com/archives/bugtraq/2002-04/0175.html
- MISChttp://www.iss.net/security_center/static/8855.php
- VENDOR_ADVISORYhttp://otn.oracle.com/deploy/security/pdf/sql_joins_alert.pdf
- MISChttp://www.securityfocus.com/bid/4523
- MISChttp://www.osvdb.org/5236