CVE-2005-4832 in Oracle10g

Resumen (Inglés)

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2007-03-03

Divulgación

2005-12-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
28135	Oracle Oracle10g inyección SQL	89	Alto	Solución alternativa	CVE-2005-4832

Fuentes

• MITRE
• NVD
• CVE Details