Vulnerability Name:

CVE-2010-0854 (CCN-57720)

Assigned:2010-04-13
Published:2010-04-13
Updated:2012-10-23
Summary:Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing."
CVSS v3 Severity:2.6 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N)
1.6 Low (Temporal CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
2.1 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-noinfo
References:Source: MITRE
Type: CNA
CVE-2010-0854

Source: CCN
Type: SA39438
Oracle Database Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
39438

Source: CCN
Type: Oracle Critical Patch Update Advisory - April 2010
Oracle Critical Patch Update Advisory - April 2010

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html

Source: CCN
Type: OSVDB ID: 63767
Oracle Database Audit Unspecified Remote Issue

Source: CCN
Type: BID-39333
RETIRED: Oracle April 2010 Critical Patch Update Multiple Vulnerabilities

Source: CCN
Type: BID-39428
Oracle Database CVE-2010-0854 Remote Audit Vulnerability

Source: CERT
Type: US Government Resource
TA10-103B

Source: XF
Type: UNKNOWN
odb-audit-unspecified(57720)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    oracle database server 9.2.0.8
    oracle database server 9.2.0.8dv
    oracle database server 10.1.0.5
    oracle database server 10.2.0.4
    oracle database server 11.1.0.7