CVE

Id
39414  
CVE No.
CVE-2009-1979  
Status
Candidate  
Description
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.  
Phase
Assigned (20090608)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
434250 39414 CVE-2009-1979 BUGTRAQ:20091030 CVE-2009-1979 (Oracle RDBMS)  View
434251 39414 CVE-2009-1979 URL:http://www.securityfocus.com/archive/1/archive/1/507598/100/0/threaded  View
434252 39414 CVE-2009-1979 MISC:http://blogs.conus.info/node/28  View
434253 39414 CVE-2009-1979 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
434254 39414 CVE-2009-1979 CERT:TA09-294A  View
434255 39414 CVE-2009-1979 URL:http://www.us-cert.gov/cas/techalerts/TA09-294A.html  View
434256 39414 CVE-2009-1979 BID:36747  View
434257 39414 CVE-2009-1979 URL:http://www.securityfocus.com/bid/36747  View
434258 39414 CVE-2009-1979 OSVDB:59110  View
434259 39414 CVE-2009-1979 URL:http://osvdb.org/59110  View
434260 39414 CVE-2009-1979 SECTRACK:1023057  View
434261 39414 CVE-2009-1979 URL:http://www.securitytracker.com/id?1023057  View
434262 39414 CVE-2009-1979 SECUNIA:37027  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43706 JVNDB-2009-004713 Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 Oracle E-Business Suite の Oracle iStore コンポーネントには、完全性に影響のある脆弱性が存在します。 CVE-2009-1983 39414 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004713.html  View