Detections
Analytics
Oracle Database Multiple Remote Vulnerabilities (Mar 2005)
high Nessus Plugin ID 14641
Language:
Synopsis
The remote database server is affected by multiple vulnerabilities.Description
The remote Oracle Database, according to its version number, contains a remote command execution vulnerability that may allow an attacker who can execute SQL statements with certain privileges to execute arbitrary commands on the remote host.Solution
Apply vendor-supplied patches.See Also
Plugin Details
Severity: High
ID: 14641
File Name: oracle_create_job_vuln.nasl
Version: 1.36
Type: remote
Family: Databases
Published: 9/2/2004
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.5
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:oracle:database_server
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/24/2004
Vulnerability Publication Date: 9/1/2004
Exploitable With
Core Impact
ExploitHub (EH-10-031)
Reference Information
CVE: CVE-2004-0637, CVE-2004-0638, CVE-2004-1362, CVE-2004-1363, CVE-2004-1364, CVE-2004-1365, CVE-2004-1366, CVE-2004-1367, CVE-2004-1368, CVE-2004-1369, CVE-2004-1370, CVE-2004-1371