CVE

Id
23628  
CVE No.
CVE-2007-0271  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04. NOTE: Oracle has not disputed a reliable researcher claim that this is a buffer overflow in the ADD_LOGFILE procedure for the SYS.DBMS_LOGMNR package that allows code execution.  
Phase
Assigned (20070116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
229345 23628 CVE-2007-0271 BUGTRAQ:20070129 Re: Re: Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNAL  View
229346 23628 CVE-2007-0271 URL:http://www.securityfocus.com/archive/1/archive/1/458475/100/100/threaded  View
229347 23628 CVE-2007-0271 BUGTRAQ:20070124 Oracle Buffer Overflow in DBMS_LOGMNR.ADD_LOGFILE  View
229348 23628 CVE-2007-0271 URL:http://www.securityfocus.com/archive/1/archive/1/458006/100/0/threaded  View
229349 23628 CVE-2007-0271 MISC:http://www.appsecinc.com/resources/alerts/oracle/2007-01.shtml  View
229350 23628 CVE-2007-0271 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html  View
229351 23628 CVE-2007-0271 CERT:TA07-017A  View
229352 23628 CVE-2007-0271 URL:http://www.us-cert.gov/cas/techalerts/TA07-017A.html  View
229353 23628 CVE-2007-0271 BID:22083  View
229354 23628 CVE-2007-0271 URL:http://www.securityfocus.com/bid/22083  View
229355 23628 CVE-2007-0271 OSVDB:32910  View
229356 23628 CVE-2007-0271 URL:http://osvdb.org/32910  View
229357 23628 CVE-2007-0271 SECTRACK:1017522  View
229358 23628 CVE-2007-0271 URL:http://securitytracker.com/id?1017522  View
229359 23628 CVE-2007-0271 SECUNIA:23794  View
229360 23628 CVE-2007-0271 URL:http://secunia.com/advisories/23794  View
229361 23628 CVE-2007-0271 XF:oracle-cpu-jan2007(31541)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51381 JVNDB-2007-000043 Oracle Database の XMLDB コンポーネントに関する脆弱性 Oracle Database には、XMLDB コンポーネントに関連する脆弱性が存在します。(DB06) CVE-2007-0273 23628 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000043.html  View