NVD

Id
49253  
Name
CVE-2009-1991  
Description
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-10-22  
Modified Date
2012-10-22  
Seq
2009-1991  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249445 49253 CVE-2009-1991 http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html  View
249446 49253 CVE-2009-1991 36748  View
249447 49253 CVE-2009-1991 1023057  View
249448 49253 CVE-2009-1991 TA09-294A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41270 JVNDB-2009-002277 Oracle Database の Oracle Text コンポーネントにおける脆弱性 Oracle Database の Oracle Text コンポーネントには、CTXSYS.DRVXTABC に関連した機密性および完全性に影響のある脆弱性が存在します。 CVE-2009-1991 39422 CVE-2009-1991 49253 3.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002277.html 2009-10-20 2009-11-30 View