Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.
http://www.securitytracker.com/id?1026929
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html