CVE-2007-1442

Опубликовано: 14 мар. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

Ссылки

http://argeniss.com/research/10MinSecAudit.zip
http://osvdb.org/33979
http://secunia.com/advisories/24475
Vendor Advisory
http://www.securityfocus.com/bid/22905
Exploit
http://argeniss.com/research/10MinSecAudit.zip
http://osvdb.org/33979
http://secunia.com/advisories/24475
Vendor Advisory
http://www.securityfocus.com/bid/22905
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:database_server:10.2.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.1:*:personal:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.1:*:standard:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.2:*:enterprise:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.2:*:personal:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.2:*:standard:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.3:*:enterprise:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.3:*:personal:*:*:*:*:*

cpe:2.3:a:oracle:database_server:10.2.3:*:standard:*:*:*:*:*

EPSS

Процентиль: 73%

0.0076

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7w8h-97qm-v5g3

github

почти 4 года назад