NVD

Id
71749  
Name
CVE-2004-1370  
Description
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-08-04  
Modified Date
2017-07-10  
Seq
2004-1370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
371011 71749 CVE-2004-1370 20041223 Oracle multiple PL/SQL injection vulnerabilities (#NISR2122004H)  View
371012 71749 CVE-2004-1370 101782  View
371013 71749 CVE-2004-1370 VU#316206  View
371014 71749 CVE-2004-1370 http://www.ngssoftware.com/advisories/oracle23122004H.txt  View
371015 71749 CVE-2004-1370 http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
371016 71749 CVE-2004-1370 10871  View
371017 71749 CVE-2004-1370 TA04-245A  View
371018 71749 CVE-2004-1370 oracle-procedure-sql-injection(18665)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63019 JVNDB-2004-000361 Oracle 製品の PL/SQL プロシージャにおける SQL インジェクションの脆弱性 ------------ CVE-2004-1370 9797 CVE-2004-1370 71749 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000361.html 2004-08-31 2007-04-01 View