CVE-2009-0985

Published: Apr 15, 2009Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.

Affected (3)

Products: Oracle: Database 10g, Database 11g

Oracle

2 products

Database 10g

Database 11g

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Database 10g	Version 10.1.0.5
Oracle Database 10g	Version 10.2.0.4
Oracle Database 11g	Version 11.1.0.6

References (10)

http://secunia.com/advisories/34693

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html

Source: secalert_us@oracle.com

http://www.securityfocus.com/bid/34461

Source: secalert_us@oracle.com

http://www.securitytracker.com/id?1022052

Source: secalert_us@oracle.com

http://www.us-cert.gov/cas/techalerts/TA09-105A.html

Source: secalert_us@oracle.com

US Government Resource

http://secunia.com/advisories/34693