NVD

Id
54280  
Name
CVE-2007-2110  
Description
Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03).  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-18  
Modified Date
2016-06-15  
Seq
2007-2110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275184 54280 CVE-2007-2110 [oracle-l] 20061201 Re: Oracle 9i on Windows 2003 -- Vulnerability Question  View
275185 54280 CVE-2007-2110 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf  View
275186 54280 CVE-2007-2110 http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf  View
275187 54280 CVE-2007-2110 http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html  View
275188 54280 CVE-2007-2110 http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html  View
275189 54280 CVE-2007-2110 SSRT061201  View
275190 54280 CVE-2007-2110 23532  View
275191 54280 CVE-2007-2110 1017927  View
275192 54280 CVE-2007-2110 TA07-108A  View
275193 54280 CVE-2007-2110 ADV-2007-1426  View
275194 54280 CVE-2007-2110 https://www.blackhat.com/presentations/bh-dc-07/Cerrudo/Presentation/bh-dc-07-Cerrudo-ppt.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51613 JVNDB-2007-000275 Oracle Database の Core RDBMS コンポーネントに関する脆弱性 Oracle Database には、Core RDBMS コンポーネントに関する脆弱性が存在します。(DB03) CVE-2007-2110 25465 CVE-2007-2110 54280 4.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000275.html 2007-04-17 2007-05-14 View