NVD

Id
71718  
Name
CVE-2004-1338  
Description
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-23  
Modified Date
2017-07-10  
Seq
2004-1338  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370834 71718 CVE-2004-1338 20041223 Oracle Trigger Abuse (#NISR2122004I)  View
370835 71718 CVE-2004-1338 http://www.ngssoftware.com/advisories/oracle23122004I.txt  View
370836 71718 CVE-2004-1338 oracle-triggers-gain-privileges(18655)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63009 JVNDB-2004-000351 Oracle Database のトリガにおける権限を取得される脆弱性 ------------ CVE-2004-1338 9765 CVE-2004-1338 71718 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000351.html 2004-08-31 2007-04-01 View