CVE-2004-1370

Published: Aug 4, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.

Affected (87)

Products: Oracle: Application Server, Collaboration Suite, E Business Suite, Enterprise Manager, Enterprise Manager Database Control, Enterprise Manager Grid Control, Oracle10g, Oracle8i, Oracle9i

9 products

Enterprise Manager Database Control

Enterprise Manager Grid Control

Oracle10g

Oracle8i

Oracle9i

Configuration A

87 vulnerable

Vulnerable Software	Affected Versions
Oracle Application Server	All versions
Oracle Application Server	Version 9.0.2.0.0
Oracle Application Server	Version 9.0.2.0.1
Oracle Application Server	Version 9.0.2.1
Oracle Application Server	Version 9.0.2.2
Oracle Application Server	Version 9.0.2.3
Oracle Application Server	Version 9.0.2
Oracle Application Server	Version 9.0.3.1
Oracle Application Server	Version 9.0.3
Oracle Application Server	Version 9.0.4.0
Oracle Application Server	Version 9.0.4.1
Oracle Application Server	Version 9.0.4
Oracle Collaboration Suite	Version release_1
Oracle E Business Suite	Version 11.5.1
Oracle E Business Suite	Version 11.5.2
Oracle E Business Suite	Version 11.5.3
Oracle E Business Suite	Version 11.5.4
Oracle E Business Suite	Version 11.5.5
Oracle E Business Suite	Version 11.5.6
Oracle E Business Suite	Version 11.5.7
Oracle E Business Suite	Version 11.5.8
Oracle E Business Suite	Version 11.5.9
Oracle Enterprise Manager	Version 9.0.1
Oracle Enterprise Manager	Version 9
Oracle Enterprise Manager Database Control	Version 10.1.2
Oracle Enterprise Manager Grid Control	Version 10.1.0.2
Oracle Oracle10g	Version enterprise_10.1.0.2
Oracle Oracle10g	Version enterprise_9.0.4_.0
Oracle Oracle10g	Version personal_10.1_.0.2
Oracle Oracle10g	Version personal_9.0.4_.0
Oracle Oracle10g	Version standard_10.1_.0.2
Oracle Oracle10g	Version standard_9.0.4_.0
Oracle Oracle8i	Version enterprise_8.0.5_.0.0
Oracle Oracle8i	Version enterprise_8.0.6_.0.0
Oracle Oracle8i	Version enterprise_8.0.6_.0.1
Oracle Oracle8i	Version enterprise_8.1.5_.0.0
Oracle Oracle8i	Version enterprise_8.1.5_.0.2
Oracle Oracle8i	Version enterprise_8.1.5_.1.0
Oracle Oracle8i	Version enterprise_8.1.6_.0.0
Oracle Oracle8i	Version enterprise_8.1.6_.1.0
Oracle Oracle8i	Version enterprise_8.1.7_.0.0
Oracle Oracle8i	Version enterprise_8.1.7_.1.0
Oracle Oracle8i	Version enterprise_8.1.7_.4
Oracle Oracle8i	Version standard_8.0.6
Oracle Oracle8i	Version standard_8.0.6_.3
Oracle Oracle8i	Version standard_8.1.5
Oracle Oracle8i	Version standard_8.1.6
Oracle Oracle8i	Version standard_8.1.7
Oracle Oracle8i	Version standard_8.1.7_.0.0
Oracle Oracle8i	Version standard_8.1.7_.1
Oracle Oracle8i	Version standard_8.1.7_.4
Oracle Oracle9i	Version client_9.2.0.1
Oracle Oracle9i	Version client_9.2.0.2
Oracle Oracle9i	Version enterprise_8.1.7
Oracle Oracle9i	Version enterprise_9.0.1.4
Oracle Oracle9i	Version enterprise_9.0.1.5
Oracle Oracle9i	Version enterprise_9.0.1
Oracle Oracle9i	Version enterprise_9.2.0.1
Oracle Oracle9i	Version enterprise_9.2.0.2
Oracle Oracle9i	Version enterprise_9.2.0.3
Oracle Oracle9i	Version enterprise_9.2.0.4
Oracle Oracle9i	Version enterprise_9.2.0.5
Oracle Oracle9i	Version enterprise_9.2.0
Oracle Oracle9i	Version personal_8.1.7
Oracle Oracle9i	Version personal_9.0.1.4
Oracle Oracle9i	Version personal_9.0.1.5
Oracle Oracle9i	Version personal_9.0.1
Oracle Oracle9i	Version personal_9.2.0.1
Oracle Oracle9i	Version personal_9.2.0.2
Oracle Oracle9i	Version personal_9.2.0.3
Oracle Oracle9i	Version personal_9.2.0.4
Oracle Oracle9i	Version personal_9.2.0.5
Oracle Oracle9i	Version personal_9.2
Oracle Oracle9i	Version standard_8.1.7
Oracle Oracle9i	Version standard_9.0.1.2
Oracle Oracle9i	Version standard_9.0.1.3
Oracle Oracle9i	Version standard_9.0.1.4
Oracle Oracle9i	Version standard_9.0.1.5
Oracle Oracle9i	Version standard_9.0.1
Oracle Oracle9i	Version standard_9.0.2
Oracle Oracle9i	Version standard_9.0
Oracle Oracle9i	Version standard_9.2.0.1
Oracle Oracle9i	Version standard_9.2.0.2
Oracle Oracle9i	Version standard_9.2.0.3
Oracle Oracle9i	Version standard_9.2.0.4
Oracle Oracle9i	Version standard_9.2.0.5
Oracle Oracle9i	Version standard_9.2