Synopsis :

The remote database server is affected by a privilege escalation
issue.

Description :

The remote host is running a version of Oracle 10g that, according to
its version number, permits a user with CREATE job privileges to
switch the session_user to SYS, which could allow privilege
escalation.

See also :

http://www.nessus.org/u?94ef874d

Solution :

Apply the 10.0.1.4 patch set for Oracle 10g.

Risk factor :

Medium / CVSS Base Score : 6.0
(CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P)
CVSS Temporal Score : 5.7
(CVSS2#E:F/RL:U/RC:ND)
Public Exploit Available : true