4.1.11 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'DBMS_SQL'

Information

The DBMS_SQL package could allow privilege escalation if the input validation is not done properly.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON DBMS_SQL FROM PUBLIC;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Audit Name: CIS Oracle Server 11g R2 DB v2.2.0

Plugin: OracleDB

Control ID: 6bc4dfd4d927e1f1f59bc402e680bcf83aa99ed20658d5435d97b1f74feac651