Oracle Database Multiple Remote Vulnerabilities (Mar 2005)

High Nessus Plugin ID 14641

Synopsis

The remote database server is affected by multiple vulnerabilities.

Description

The remote Oracle Database, according to its version number, contains a remote command execution vulnerability that may allow an attacker who can execute SQL statements with certain privileges to execute arbitrary commands on the remote host.

Solution

Apply vendor-supplied patches.

See Also

http://www.nessus.org/u?e1d0c17a

Plugin Details

Severity: High

ID: 14641

File Name: oracle_create_job_vuln.nasl

Version: 1.35

Type: remote

Family: Databases

Published: 2004/09/02

Updated: 2018/07/16

Dependencies: 10658

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:database_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2004/09/24

Vulnerability Publication Date: 2004/09/01

Exploitable With

Core Impact

ExploitHub (EH-10-031)

Reference Information

CVE: CVE-2004-0637, CVE-2004-0638, CVE-2004-1362, CVE-2004-1363, CVE-2004-1364, CVE-2004-1365, CVE-2004-1366, CVE-2004-1367, CVE-2004-1368, CVE-2004-1369, CVE-2004-1370, CVE-2004-1371

BID: 10871, 11091, 11100, 11099, 11120

CWE: 22, 94, 119, 200, 255