Oracle Database Multiple Remote Vulnerabilities (Mar 2005)

High Nessus Plugin ID 14641


The remote database server is affected by multiple vulnerabilities.


The remote Oracle Database, according to its version number, contains a remote command execution vulnerability that may allow an attacker who can execute SQL statements with certain privileges to execute arbitrary commands on the remote host.


Apply vendor-supplied patches.

See Also

Plugin Details

Severity: High

ID: 14641

File Name: oracle_create_job_vuln.nasl

Version: 1.35

Type: remote

Family: Databases

Published: 2004/09/02

Updated: 2018/07/16

Dependencies: 10658

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:database_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2004/09/24

Vulnerability Publication Date: 2004/09/01

Exploitable With

Core Impact

ExploitHub (EH-10-031)

Reference Information

CVE: CVE-2004-0637, CVE-2004-0638, CVE-2004-1362, CVE-2004-1363, CVE-2004-1364, CVE-2004-1365, CVE-2004-1366, CVE-2004-1367, CVE-2004-1368, CVE-2004-1369, CVE-2004-1370, CVE-2004-1371

BID: 10871, 11091, 11100, 11099, 11120

CWE: 22, 94, 119, 200, 255