CVE-2007-0274
- State
- Published
- Severity
- Not scored
- Published
- Jan 17, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 16, 2007
Description
Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbms_logrep_util (DB08), and (2) Oracle Streams and sys.dbms_capture_adm_internal privileges (DB09). NOTE: Oracle has not disputed reliable researcher claims that DB08 is for a buffer overflow in the GET_OBJECT_NAME procedure in the DBMS_LOGREP_UTIL package, and DB09 is for buffer overflows in the CREATE_CAPTURE, ALTER_CAPTURE, and ABORT_TABLE_INSTANTIATION procedures in SYS.DBMS_CAPTURE_ADM_INTERNAL.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070124 Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAMEmailing-list
- 20070129 Re: Re: Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNALmailing-list
- 23794third-party-advisory
- 20070125 Re: Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAMEmailing-list
- 32915vdb-entry
- 22083vdb-entry
- 20070125 Re: Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNALmailing-list
- http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
- TA07-017Athird-party-advisory
- oracle-cpu-jan2007(31541)vdb-entry
- 1017522vdb-entry
- 20070124 Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNALmailing-list
- 32914vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.