CVE-2004-0637

Опубликовано: 02 сент. 2004

Источник: nvd

CVSS2: 6.5

EPSS Средний

Описание

Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.

Ссылки

http://secunia.com/advisories/12409/
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/316206
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11099
http://secunia.com/advisories/12409/
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/316206
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11099

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19334

Средний

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-mjf8-rrmf-q848

github

больше 3 лет назад