|
|
CVE Reference: CVE-2007-2112 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-2112 |
|
|
Description: Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547. |
|
|
CVE Status: Candidate |
|
|
References: ST 1017927 MISC http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf http://www.red-database-security.com/advisory/bypass_oracle_logon_trigger.html http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf HP http://www.securityfocus.com/archive/1/archive/1/466329/100/200/threaded CONFIRM http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html CERT http://www.us-cert.gov/cas/techalerts/TA07-108A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/466151/100/0/threaded BID 23532 |
|
| Return to the previous page. |
