This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
DB:ORACLE:ORACLE-DSI
|
Severity |
Critical
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
DB
|
Keywords |
Oracle Database DBMS_SNAP_INTERNAL Package Buffer Overflow
|
Release Date |
2008/01/28
|
Update Number |
1213
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
DB: Oracle Database DBMS_SNAP_INTERNAL Package Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Oracle Database Server. It is due to a boundary error within the DBMS_SNAP_INTERNAL package of the product. A remote authenticated attacker can send an overly long input to the affected package and cause a buffer overflow. A successful attack allows arbitrary code injection and execution with the privileges of the server process, usually System/root.
Extended Description
Oracle has released a Critical Patch Update advisory for April 2007 to address these vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by these issues as well.
The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Various levels of authorization are needed to leverage some of the issues, but other issues do not require any authorization. The most severe of the vulnerabilities could possibly expose affected computers to complete compromise.
Affected Products
- Hp oracle_for_openview 8.1.7
- Hp oracle_for_openview 9.1.01
- Hp oracle_for_openview 9.2
- Hp oracle_for_openview_for_linux_ltu
- Ibm tivoli_compliance_insight_manager 6.0
- Ibm tivoli_compliance_insight_manager 7.0
- Ibm tivoli_compliance_insight_manager 8.0
- Oracle application_server 10.1.2.0.0
- Oracle application_server 10.1.2.0.2
- Oracle application_server 10.1.2.2
- Oracle application_server 10.1.3.0
- Oracle application_server 10.1.3.2.0
- Oracle application_server 10.1.4.1.0
- Oracle application_server 7.0.4.4
- Oracle application_server 9.0.4.3
- Oracle collaboration_suite_release_1 10.1.2
- Oracle e-business_suite 12.0.0
- Oracle e-business_suite_11i 11.5.10
- Oracle e-business_suite_11i 11.5.10.2
- Oracle e-business_suite_11i 11.5.10 CU2
- Oracle e-business_suite_11i 11.5.7
- Oracle e-business_suite_11i 11.5.8
- Oracle e-business_suite_11i 11.5.9
- Oracle e-business_suite_12 12.0.0
- Oracle enterprise_manager_9i 9.0.1 5
- Oracle enterprise_manager_9i_release_2 9.2.0 7
- Oracle enterprise_manager_9i_release_2 9.2.0 8
- Oracle jd_edwards_enterpriseone 8.96
- Oracle jd_edwards_enterpriseone 8.96.11
- Oracle jd_edwards_oneworld_tools SP23
- Oracle oracle10g_application_server 10.1.0 .0.4
- Oracle oracle10g_application_server 10.1.0 .5
- Oracle oracle10g_application_server 10.1.2 .0.1
- Oracle oracle10g_application_server 10.1.2 .0.2
- Oracle oracle10g_application_server 10.1.2 .1.0
- Oracle oracle10g_application_server 10.1.2 .2.0
- Oracle oracle10g_application_server 10.1.3 .0.0
- Oracle oracle10g_application_server 10.1.3 .1.0
- Oracle oracle10g_application_server 10.1.3 .2.0
- Oracle oracle10g_application_server 9.0.4 3
- Oracle oracle10g_enterprise_edition 10.1.0 .0.2
- Oracle oracle10g_enterprise_edition 10.1.0 .0.4
- Oracle oracle10g_enterprise_edition 10.1.0 .5
- Oracle oracle10g_enterprise_edition 10.2.0 .1
- Oracle oracle10g_enterprise_edition 10.2.0 .2
- Oracle oracle10g_enterprise_edition 10.2.0 .3
- Oracle oracle10g_personal_edition 10.1.0 .0.2
- Oracle oracle10g_personal_edition 10.1.0 .0.4
- Oracle oracle10g_personal_edition 10.1.0.5
- Oracle oracle10g_personal_edition 10.2.0 .1
- Oracle oracle10g_personal_edition 10.2.0 .2
- Oracle oracle10g_personal_edition 10.2.0 .3
- Oracle oracle10g_standard_edition 10.1.0 .0.2
- Oracle oracle10g_standard_edition 10.1.0 .0.4
- Oracle oracle10g_standard_edition 10.1.0 .0.5
- Oracle oracle10g_standard_edition 10.2.0.1
- Oracle oracle10g_standard_edition 10.2.0 .2
- Oracle oracle10g_standard_edition 10.2.0 .3
- Oracle oracle9i_application_server 9.2.0 .0.7
- Oracle oracle9i_application_server 9.2.0 .8
- Oracle oracle9i_enterprise_edition 9.0.1 .5
- Oracle oracle9i_enterprise_edition 9.2.0 .0.1
- Oracle oracle9i_enterprise_edition 9.2.0 .0.5
- Oracle oracle9i_enterprise_edition 9.2.0.7.0
- Oracle oracle9i_enterprise_edition 9.2.0.8.0
- Oracle oracle9i_personal_edition 9.0.1 .5
- Oracle oracle9i_personal_edition 9.2.0 .0.1
- Oracle oracle9i_personal_edition 9.2.0 .0.5
- Oracle oracle9i_personal_edition 9.2.0 .7
- Oracle oracle9i_personal_edition 9.2.0 .8
- Oracle peoplesoft_enterprise 8.22.14
- Oracle peoplesoft_enterprise 8.47.12
- Oracle peoplesoft_enterprise 8.48.08
- Oracle peoplesoft_enterprise 8.9
- Oracle peoplesoft_enterprise_human_capital_management 8.9
- Oracle peoplesoft_enterprise_peopletools 8.22
- Oracle peoplesoft_enterprise_peopletools 8.47
- Oracle peoplesoft_enterprise_peopletools 8.48
- Oracle secure_enterprise_search_10g_release_1 10.1.6
References