CVE

Id
38412  
CVE No.
CVE-2009-0977  
Status
Candidate  
Description
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the GRANT_TYPE_ACCESS procedure in the DBMS_AQADM_SYS package.  
Phase
Assigned (20090319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419240 38412 CVE-2009-0977 BUGTRAQ:20090416 SQL Injection in package DBMS_AQADM_SYS  View
419241 38412 CVE-2009-0977 URL:http://www.securityfocus.com/archive/1/archive/1/502727/100/0/threaded  View
419242 38412 CVE-2009-0977 MISC:http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_aqadm_sys.html  View
419243 38412 CVE-2009-0977 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html  View
419244 38412 CVE-2009-0977 CERT:TA09-105A  View
419245 38412 CVE-2009-0977 URL:http://www.us-cert.gov/cas/techalerts/TA09-105A.html  View
419246 38412 CVE-2009-0977 BID:34461  View
419247 38412 CVE-2009-0977 URL:http://www.securityfocus.com/bid/34461  View
419248 38412 CVE-2009-0977 SECTRACK:1022052  View
419249 38412 CVE-2009-0977 URL:http://www.securitytracker.com/id?1022052  View
419250 38412 CVE-2009-0977 SECUNIA:34693  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40226 JVNDB-2009-001232 Oracle Database の Application Express コンポーネントにおける脆弱性 Oracle Database の Application Express コンポーネントには、機密性に影響のある脆弱性が存在します。 CVE-2009-0981 38412 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001232.html  View