Oracle Database Multiple Remote Vulnerabilities (Mar 2005)

high Nessus Plugin ID 14641

Synopsis

The remote database server is affected by multiple vulnerabilities.

Description

The remote Oracle Database, according to its version number, contains a remote command execution vulnerability that may allow an attacker who can execute SQL statements with certain privileges to execute arbitrary commands on the remote host.

Solution

Apply vendor-supplied patches.

See Also

http://www.nessus.org/u?e1d0c17a

Plugin Details

Severity: High

ID: 14641

File Name: oracle_create_job_vuln.nasl

Version: 1.36

Type: remote

Family: Databases

Published: 9/2/2004

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.5

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:oracle:database_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/24/2004

Vulnerability Publication Date: 9/1/2004

Exploitable With

Core Impact

ExploitHub (EH-10-031)

Reference Information

CVE: CVE-2004-0637, CVE-2004-0638, CVE-2004-1362, CVE-2004-1363, CVE-2004-1364, CVE-2004-1365, CVE-2004-1366, CVE-2004-1367, CVE-2004-1368, CVE-2004-1369, CVE-2004-1370, CVE-2004-1371

BID: 10871, 11091, 11099, 11100, 11120

CWE: 119, 200, 22, 255, 94