NVD

Id
57578  
Name
CVE-2007-5513  
Description
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-17  
Modified Date
2012-10-22  
Seq
2007-5513  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294679 57578 CVE-2007-5513 SSRT061201  View
294680 57578 CVE-2007-5513 3247  View
294681 57578 CVE-2007-5513 http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-oracle-xmldb-ftp-service/  View
294682 57578 CVE-2007-5513 http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html  View
294683 57578 CVE-2007-5513 20071017 Oracle audit issue with XMLDB ftp service  View
294684 57578 CVE-2007-5513 26107  View
294685 57578 CVE-2007-5513 1018823  View
294686 57578 CVE-2007-5513 TA07-290A  View
294687 57578 CVE-2007-5513 ADV-2007-3524  View
294688 57578 CVE-2007-5513 ADV-2007-3626  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52169 JVNDB-2007-000859 Oracle Database の XML DB コンポーネントにおける不適切な認証処理の脆弱性 Oracle Database の XML DB コンポーネントには、ユーザネームの欄において、過度に長い、および短いユーザ名を指定した際に、エントリー可能となる脆弱性が存在します。(DB23) CVE-2007-5513 28868 CVE-2007-5513 57578 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000859.html 2007-10-16 2007-10-29 View