CVE-2005-1496

Published: May 11, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

Affected (12)

Products: Oracle: Application Server, Oracle10g

Oracle

2 products

Application Server

Oracle10g

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Oracle Application Server	Version 10.1.0.2
Oracle Application Server	Version 10.1.0.3.1
Oracle Application Server	Version 10.1.0.3
Oracle Oracle10g	Version enterprise_10.1.0.2
Oracle Oracle10g	Version enterprise_10.1.0.3.1
Oracle Oracle10g	Version enterprise_10.1.0.3
Oracle Oracle10g	Version personal_10.1.0.2
Oracle Oracle10g	Version personal_10.1.0.3.1
Oracle Oracle10g	Version personal_10.1.0.3
Oracle Oracle10g	Version standard_10.1.0.2
Oracle Oracle10g	Version standard_10.1.0.3.1
Oracle Oracle10g	Version standard_10.1.0.3