CVE-2009-0985

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.

Affected products

• oracle / database_10g10.1.0.5 – 10.1.0.5
• oracle / database_10g10.2.0.4 – 10.2.0.4
• oracle / database_11g11.1.0.6 – 11.1.0.6

References

• MISChttp://www.securityfocus.com/bid/34461
• VENDOR_ADVISORYhttp://secunia.com/advisories/34693
• MISChttp://www.us-cert.gov/cas/techalerts/TA09-105A.html
• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• MISChttp://www.securitytracker.com/id?1022052