CVE-2007-3855

Published: Jul 18, 2007Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.

Affected (5)

Products: Oracle: Database Server

1 product

Database Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 10.1.0.5
Oracle Database Server	Version 10.2.0.3
Oracle Database Server	Version 9.0.1.5
Oracle Database Server	Version 9.2.0.8
Oracle Database Server	Version 9.2.0.8dv

References (34)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143

Source: cve@mitre.org

http://rawlab.mindcreations.com/codes/exp/oracle/bunkerview.sql

Source: cve@mitre.org

http://secunia.com/advisories/26114

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26166

Source: cve@mitre.org

http://securityreason.com/securityalert/2903

Source: cve@mitre.org

http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html

Source: cve@mitre.org

http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html

Source: cve@mitre.org

http://www.red-database-security.com/advisory/oracle_view_vulnerability.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/473997/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474326/100/0/threaded

Source: cve@mitre.org

http://www.securitytracker.com/id?1018415

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-200A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/2562

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2635

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35490

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35495

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143

Source: af854a3a-2127-422b-91ae-364da2661108

http://rawlab.mindcreations.com/codes/exp/oracle/bunkerview.sql

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26114

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26166

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/2903

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.red-database-security.com/advisory/oracle_view_vulnerability.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/473997/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/474326/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018415

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA07-200A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2007/2562

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2635

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35490

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35495

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.