Signature Detail
Short Name |
DB:ORACLE:DBMS-ASSERT |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
Oracle Database dbms_assert Filter Bypass |
Release Date |
2011/07/27 |
Update Number |
1961 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: Oracle Database dbms_assert Filter Bypass
This signature detects attempts to exploit a known vulnerability against Oracle Database. An attacker can send a crafted message to the server allowing them to bypass security restrictions.
Extended Description
Oracle dbms_assert is prone to a vulnerability that could bypass the intended functionality of the process. This issue occurs because the software fails to properly sanitize user-supplied input. An attacker can exploit this issue to inject malicious SQL code into applications using dbms_assert to filter content.
Affected Products
- Oracle Oracle10g Enterprise Edition 10.1.0 .0.2
- Oracle Oracle10g Enterprise Edition 10.1.0 .0.3
- Oracle Oracle10g Enterprise Edition 10.1.0 .0.3.1
- Oracle Oracle10g Enterprise Edition 10.1.0 .0.4
- Oracle Oracle10g Enterprise Edition 10.2.0 .1
- Oracle Oracle10g Enterprise Edition 10.2.0 .2
- Oracle Oracle10g Enterprise Edition 10.2.0 .3
- Oracle Oracle10g Enterprise Edition 9.0.4 .0
- Oracle Oracle10g Personal Edition 10.1.0 .0.2
- Oracle Oracle10g Personal Edition 10.1.0 .0.3
- Oracle Oracle10g Personal Edition 10.1.0 .0.3.1
- Oracle Oracle10g Personal Edition 10.1.0 .0.4
- Oracle Oracle10g Personal Edition 10.2.0 .1
- Oracle Oracle10g Personal Edition 10.2.0 .2
- Oracle Oracle10g Personal Edition 10.2.0 .3
- Oracle Oracle10g Personal Edition 9.0.4 .0
- Oracle Oracle10g Standard Edition 10.1.0 .0.2
- Oracle Oracle10g Standard Edition 10.1.0 .0.3
- Oracle Oracle10g Standard Edition 10.1.0 .0.3.1
- Oracle Oracle10g Standard Edition 10.1.0 .0.4
- Oracle Oracle10g Standard Edition 10.1.0 .0.5
- Oracle Oracle10g Standard Edition 10.1.0 .4.2
- Oracle Oracle10g Standard Edition 10.2.0.1
- Oracle Oracle10g Standard Edition 10.2.0 .2
- Oracle Oracle10g Standard Edition 10.2.0 .3
- Oracle Oracle10g Standard Edition 9.0.4 .0
- Oracle Oracle8i Enterprise Edition 8.1.7.4.0
- Oracle Oracle8i Standard Edition 8.1.7 .4
- Oracle Oracle9i Enterprise Edition 8.1.7
- Oracle Oracle9i Enterprise Edition 9.0.0 .2.4
- Oracle Oracle9i Enterprise Edition 9.0.1
- Oracle Oracle9i Enterprise Edition 9.0.1 .4
- Oracle Oracle9i Enterprise Edition 9.0.1 .5
- Oracle Oracle9i Enterprise Edition 9.0.1 .5 FIPS
- Oracle Oracle9i Enterprise Edition 9.0.4
- Oracle Oracle9i Enterprise Edition 9.2.0 .0
- Oracle Oracle9i Enterprise Edition 9.2.0 .0.1
- Oracle Oracle9i Enterprise Edition 9.2.0 .0.3
- Oracle Oracle9i Enterprise Edition 9.2.0 .0.5
- Oracle Oracle9i Enterprise Edition 9.2.0.2
- Oracle Oracle9i Enterprise Edition 9.2.0.6.0
- Oracle Oracle9i Enterprise Edition 9.2.0.7.0
- Oracle Oracle9i Personal Edition 8.1.7
- Oracle Oracle9i Personal Edition 9.0.0 .2.4
- Oracle Oracle9i Personal Edition 9.0.1
- Oracle Oracle9i Personal Edition 9.0.1 .4
- Oracle Oracle9i Personal Edition 9.0.1 .5
- Oracle Oracle9i Personal Edition 9.0.1 .5 FIPS
- Oracle Oracle9i Personal Edition 9.0.4
- Oracle Oracle9i Personal Edition 9.2.0
- Oracle Oracle9i Personal Edition 9.2.0 .0.1
- Oracle Oracle9i Personal Edition 9.2.0 .0.2
- Oracle Oracle9i Personal Edition 9.2.0 .0.3
- Oracle Oracle9i Personal Edition 9.2.0 .0.5
- Oracle Oracle9i Personal Edition 9.2.0 .6
- Oracle Oracle9i Personal Edition 9.2.0 .7
- Oracle Oracle9i Standard Edition 8.1.7
- Oracle Oracle9i Standard Edition 9.0.0
- Oracle Oracle9i Standard Edition 9.0.0 .2.4
- Oracle Oracle9i Standard Edition 9.0.1
- Oracle Oracle9i Standard Edition 9.0.1 .2
- Oracle Oracle9i Standard Edition 9.0.1 .3
- Oracle Oracle9i Standard Edition 9.0.1 .4
- Oracle Oracle9i Standard Edition 9.0.1 .5
- Oracle Oracle9i Standard Edition 9.0.1 .5 FIPS
- Oracle Oracle9i Standard Edition 9.0.2
- Oracle Oracle9i Standard Edition 9.0.4
- Oracle Oracle9i Standard Edition 9.2.0
- Oracle Oracle9i Standard Edition 9.2.0 .0.1
- Oracle Oracle9i Standard Edition 9.2.0 .0.2
- Oracle Oracle9i Standard Edition 9.2.0 .0.3
- Oracle Oracle9i Standard Edition 9.2.0 .0.5
- Oracle Oracle9i Standard Edition 9.2.0 .1
- Oracle Oracle9i Standard Edition 9.2.0 .2
- Oracle Oracle9i Standard Edition 9.2.0 .3
- Oracle Oracle9i Standard Edition 9.2.0 .6
- Oracle Oracle9i Standard Edition 9.2.0 .7
References
- BugTraq: 19203