CVE

Id
38416  
CVE No.
CVE-2009-0981  
Status
Candidate  
Description
Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement.  
Phase
Assigned (20090319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419277 38416 CVE-2009-0981 BUGTRAQ:20090416 Unprivileged DB users can see APEX password hashes  View
419278 38416 CVE-2009-0981 URL:http://www.securityfocus.com/archive/1/archive/1/502724/100/0/threaded  View
419279 38416 CVE-2009-0981 MILW0RM:8456  View
419280 38416 CVE-2009-0981 URL:http://www.milw0rm.com/exploits/8456  View
419281 38416 CVE-2009-0981 MISC:http://www.red-database-security.com/advisory/apex_password_hashes.html  View
419282 38416 CVE-2009-0981 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html  View
419283 38416 CVE-2009-0981 CERT:TA09-105A  View
419284 38416 CVE-2009-0981 URL:http://www.us-cert.gov/cas/techalerts/TA09-105A.html  View
419285 38416 CVE-2009-0981 BID:34461  View
419286 38416 CVE-2009-0981 URL:http://www.securityfocus.com/bid/34461  View
419287 38416 CVE-2009-0981 OSVDB:53738  View
419288 38416 CVE-2009-0981 URL:http://osvdb.org/53738  View
419289 38416 CVE-2009-0981 SECTRACK:1022052  View
419290 38416 CVE-2009-0981 URL:http://www.securitytracker.com/id?1022052  View
419291 38416 CVE-2009-0981 SECUNIA:34693  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40214 JVNDB-2009-001220 Oracle Database の Core RDBMS コンポーネントにおける脆弱性 Oracle Database の Core RDBMS コンポーネントには、機密性、完全性および可用性に影響のある脆弱性が存在します。 CVE-2009-0985 38416 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001220.html  View