Signature Detail
Short Name |
DB:ORACLE:SDO-CODE-AUTH-BYPASS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
Oracle Database Server SDO_CODE_SIZE Authorization Bypass |
Release Date |
2004/09/15 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DB: Oracle Database Server SDO_CODE_SIZE Authorization Bypass
This signature detects attempts to exploit a known vulnerability in Oracle Database server. A successful attack could allow the attacker to bypass mandatory checks and gain unauthorized, privileged access to the vulnerable application.
Extended Description
Oracle Database Server is prone to an access validation vulnerability that may permit unprivileged users to execute commands as the DBA. This could compromise the database. This issue corresponds to one of the unspecified vulnerabilities mentioned in BID 10871 and addressed by Oracle Alert #68.
Affected Products
- Oracle Oracle8i Enterprise Edition 8.1.7.4.0
- Oracle Oracle8i Standard Edition 8.1.7 .4
- Oracle Oracle9i Enterprise Edition 9.0.0 .2.4
- Oracle Oracle9i Personal Edition 9.0.0 .2.4
- Oracle Oracle9i Standard Edition 9.0.0 .2.4
- Oracle Oracle9i Standard Edition 9.0.1 .3
References