Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-0271
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-0271

Description:
Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04. NOTE: Oracle has not disputed a reliable researcher claim that this is a buffer overflow in the ADD_LOGFILE procedure for the SYS.DBMS_LOGMNR package that allows code execution.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/31541

ST
  1017522

SAID
  Secunia Advisory: SA23794

OSVDB
  32910

MISC
  http://www.appsecinc.com/resources/alerts/oracle/2007-01.shtml

CONFIRM
  http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html

CERT
  http://www.us-cert.gov/cas/techalerts/TA07-017A.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/458006/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/458475/100/100/threaded

BID
  22083


Return to the previous page.