CVE

Id
39426  
CVE No.
CVE-2009-1991  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.  
Phase
Assigned (20090608)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
434391 39426 CVE-2009-1991 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
434392 39426 CVE-2009-1991 CERT:TA09-294A  View
434393 39426 CVE-2009-1991 URL:http://www.us-cert.gov/cas/techalerts/TA09-294A.html  View
434394 39426 CVE-2009-1991 BID:36748  View
434395 39426 CVE-2009-1991 URL:http://www.securityfocus.com/bid/36748  View
434396 39426 CVE-2009-1991 OSVDB:59113  View
434397 39426 CVE-2009-1991 URL:http://osvdb.org/59113  View
434398 39426 CVE-2009-1991 SECTRACK:1023057  View
434399 39426 CVE-2009-1991 URL:http://www.securitytracker.com/id?1023057  View
434400 39426 CVE-2009-1991 SECUNIA:37027  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41269 JVNDB-2009-002276 Oracle Database の Advanced Queuing コンポーネントにおける脆弱性 racle Database の Advanced Queuing コンポーネントには、SYS.DBMS_AQ_INV に関連した機密性および完全性に影響のある脆弱性が存在します。 CVE-2009-1995 39426 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002276.html  View