4.2.9 Ensure 'EXECUTE' Is Revoked from 'PUBLIC' on 'DBMS_PRVTAQIM'

Information

As use of the DBMS_PRVTAQIM package could allow an unauthorized user to escalate privileges because any SQL statements could be executed as user SYS.

Solution

To remediate this setting execute the following SQL statement. REVOKE EXECUTE ON DBMS_PRVTAQIM FROM PUBLIC;

See Also

https://workbench.cisecurity.org/files/601

Item Details

Audit Name: CIS Oracle Server 11g R2 DB v2.2.0

Plugin: OracleDB

Control ID: 2ac96be3662ef37a8fedba7ca8bc690e7bf06d5b811a88c8deeaa495c90f8fb9