This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
DB:ORACLE:PITRIG-TRUNC-DROP
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
DB
|
Keywords |
Oracle PITRIG TRUNCATE DROP Injection
|
Release Date |
2008/02/21
|
Update Number |
1213
|
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
DB: Oracle PITRIG TRUNCATE DROP Injection
This signature detects attempts to exploit a known vulnerability against Oracle Database Server XDB. A successful attack can allow attackers to inject SQL statements without authentication.
Extended Description
Oracle has released its critical patch update for January 2008. The advisory addresses 26 vulnerabilities affecting Oracle Database, Oracle Application Server, Oracle Collaboration Suite, Oracle E-Business Suite, Oracle Enterprise Manager, and Oracle People Soft Enterprise.
The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Various levels of authorization are needed to leverage some of the issues, but other issues do not require any authorization. The most severe of the vulnerabilities could possibly compromise affected computers.
Affected Products
- Oracle collaboration_suite_10g 10.1.2
- Oracle e-business_suite_11i 11.5.10
- Oracle e-business_suite_11i 11.5.10 CU2
- Oracle e-business_suite_11i 11.5.8
- Oracle e-business_suite_11i 11.5.9
- Oracle e-business_suite_12 12.0.0
- Oracle e-business_suite_12 12.0.1
- Oracle e-business_suite_12 12.0.2
- Oracle e-business_suite_12 12.0.3
- Oracle enterprise_manager_database_control_10g 10.1.0.5
- Oracle enterprise_manager_database_control_10g 10.2.0.2
- Oracle enterprise_manager_database_control_10g 10.2.0.3
- Oracle enterprise_manager_grid_control_10g 10.1.0 .5
- Oracle enterprise_manager_grid_control_10g 10.1.0 6
- Oracle oracle10g_application_server 10.1.2 .0.1
- Oracle oracle10g_application_server 10.1.2 .0.2
- Oracle oracle10g_application_server 10.1.2 .1.0
- Oracle oracle10g_application_server 10.1.2 .2.0
- Oracle oracle10g_application_server 10.1.3 .0.0
- Oracle oracle10g_application_server 10.1.3 .1.0
- Oracle oracle10g_application_server 10.1.3 .2.0
- Oracle oracle10g_application_server 10.1.3 .3.0
- Oracle oracle10g_application_server 9.0.4 3
- Oracle oracle10g_enterprise_edition 10.1.0 .5
- Oracle oracle10g_enterprise_edition 10.2.0 .2
- Oracle oracle10g_enterprise_edition 10.2.0 .3
- Oracle oracle10g_personal_edition 10.1.0.5
- Oracle oracle10g_personal_edition 10.2.0 .2
- Oracle oracle10g_personal_edition 10.2.0 .3
- Oracle oracle10g_standard_edition 10.1.0 .5
- Oracle oracle10g_standard_edition 10.2.0 .2
- Oracle oracle10g_standard_edition 10.2.0 .3
- Oracle oracle11g_enterprise_edition 11.1.0 6
- Oracle oracle11g_standard_edition 11.1.0 6
- Oracle oracle11g_standard_edition_one 11.1.0 6
- Oracle oracle9i_enterprise_edition 9.2.0.8.0
- Oracle oracle9i_enterprise_edition 9.2.0 .8DV
- Oracle oracle9i_personal_edition 9.2.0 .8
- Oracle oracle9i_personal_edition 9.2.0 .8DV
- Oracle oracle9i_standard_edition 9.2.0.8
- Oracle oracle9i_standard_edition 9.2.0 .8DV
- Oracle peoplesoft_enterprise_peopletools 8.22
- Oracle peoplesoft_enterprise_peopletools 8.47
- Oracle peoplesoft_enterprise_peopletools 8.48
- Oracle peoplesoft_enterprise_peopletools 8.49
References