NVD

Id
67234  
Name
CVE-2005-1496  
Description
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-11  
Modified Date
2017-07-10  
Seq
2005-1496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
348705 67234 CVE-2005-1496 20050505 Oracle 10g DBMS_SCHEDULER SESSION_USER issue  View
348706 67234 CVE-2005-1496 http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html  View
348707 67234 CVE-2005-1496 13509  View
348708 67234 CVE-2005-1496 oracle10g-gain-privileges(20410)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62091 JVNDB-2005-000293 Oracle Database の DBMS_SCHEDULER パッケージにおける権限昇格の脆弱性 Oracle Database に含まれている DBMS_SCHEDULER パッケージの特定のプロシージャには、session_user の権限を System 権限に変更可能な脆弱性が存在します。 CVE-2005-1496 12700 CVE-2005-1496 67234 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000293.html 2005-05-02 2007-04-01 View