• [January 18, 2005]
  • Multiple Vulnerabilities in Oracle Database Server
  • By:  Mark Joseph Edwards
  • Discoveries
  • InstantDoc #45114
  • Web Exclusive from Windows IT Pro



Reported January 18, 2005, by NGSSoftware

VERSIONS AFFECTED

         All releases of versions 10g and 9i

DESCRIPTION

Multiple vulnerabilities have been discovered in Oracle Database Server. The vulnerabilities include "PL/SQL" injection and an unchecked buffer, which could allow an overflow to occur. The vulnerabilities could allow users to gain adminstrator privileges on an affect server.


VENDOR RESPONSE

Oracle has issued patches to correct these problems which can be obtained at the company's MetaLink Web site.

CREDIT
Discovered by Next Generation Security Software

End of Article




You must log on before posting a comment.

If you don't have a username & password, please register now.

Reader Comments

When it comes to software, there really is no such thing as "unbreakable".

Anonymous User- January 18, 2005

 
 

ADS BY GOOGLE