NVD

Id
54278  
Name
CVE-2007-2108  
Description
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote attackers to have an unknown impact, aka DB01. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue occurs because the NTLM SSPI AcceptSecurityContext function grants privileges based on the username provided even though all users are authenticated as Guest, which allows remote attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-18  
Modified Date
2012-10-22  
Seq
2007-2108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275164 54278 CVE-2007-2108 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf  View
275165 54278 CVE-2007-2108 VU#809457  View
275166 54278 CVE-2007-2108 http://www.ngssoftware.com/papers/database-on-xp.pdf  View
275167 54278 CVE-2007-2108 http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf  View
275168 54278 CVE-2007-2108 http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html  View
275169 54278 CVE-2007-2108 http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html  View
275170 54278 CVE-2007-2108 HPSBMA02133  View
275171 54278 CVE-2007-2108 23532  View
275172 54278 CVE-2007-2108 1017927  View
275173 54278 CVE-2007-2108 TA07-108A  View
275174 54278 CVE-2007-2108 ADV-2007-1426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51611 JVNDB-2007-000273 Oracle Database の Core RDBMS コンポーネントに関する脆弱性 Oracle Database には、Core RDBMS コンポーネントに関する脆弱性が存在します。(DB01) CVE-2007-2108 25463 CVE-2007-2108 54278 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000273.html 2007-04-17 2007-05-14 View