CVE-2005-3438 Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logi...
HighCVSS 10.0
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle database server | <= 10.1.0.4.2 | No fix listed |
References
- 20051020 Exploit Oracle DB27 - CPU Octobre exploit mailing-list
- 17250 third-party-advisory
- VU#210524 third-party-advisory us-government-resource
- VU#449444 third-party-advisory us-government-resource
- www.oracle.com
- 15134 vdb-entry
- TA05-292A third-party-advisory us-government-resource