CVE-2009-0992 Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DB...
MediumCVSS 5.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle database 10g | = 10.1.0.5 | No fix listed |
| oracle database 10g | = 10.2.0.4 | No fix listed |
| oracle database 11g | = 11.1.0.7 | No fix listed |
References
- 34693 third-party-advisory
- www.oracle.com
- www.red-database-security.com
- 20090416 SQL Injection in package DBMS_AQIN mailing-list
- 34461 vdb-entry
- 1022052 vdb-entry
- TA09-105A third-party-advisory us-government-resource