CVE-2009-1997

Published: Oct 22, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.

Affected (2)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 10.2.0.3
Oracle Database Server	Version 11.1.0.7

References (10)

http://secunia.com/advisories/37027

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html

Source: secalert_us@oracle.com

http://www.securityfocus.com/bid/36751

Source: secalert_us@oracle.com

http://www.securitytracker.com/id?1023057

Source: secalert_us@oracle.com

http://www.us-cert.gov/cas/techalerts/TA09-294A.html

Source: secalert_us@oracle.com

US Government Resource

http://secunia.com/advisories/37027