| Vulnerability Name: | CVE-2011-0838 (CCN-68612) | ||||||||
| Assigned: | 2011-07-20 | ||||||||
| Published: | 2011-07-20 | ||||||||
| Updated: | 2011-10-05 | ||||||||
| Summary: | Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to create procedure privileges. | ||||||||
| CVSS v3 Severity: | 5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P) 4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
4.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2011-0838 Source: CCN Type: Oracle Critical Patch Update Advisory - July 2011 Oracle Critical Patch Update Advisory - July 2011 Source: CONFIRM Type: Patch, Vendor Advisory http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html Source: CCN Type: OSVDB ID: 73946 Oracle Database Core RDBMS Unspecified Remote Issue (2011-0838) Source: CCN Type: BID-48731 Oracle Database Server CVE-2011-0838 Remote Core RDBMS Vulnerability Source: CERT Type: US Government Resource TA11-201A Source: XF Type: UNKNOWN ora-dbserv-corerdbms-unspec-var1(68612) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||