CVE-2007-2112: Medium severity Oracle Database Server vulnerability

Published Apr 18, 2007

Updated

Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTHALTERSESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547.

Affected Software

2 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.1.0.5

Event History

Apr 18, 2007

CVE Published

06:19 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2112?

CVE-2007-2112 is considered to be of unknown severity as the impact and attack vectors are not specified.

How do I fix CVE-2007-2112?

To address CVE-2007-2112, users should apply available patches or updates from Oracle for affected versions.

What versions of Oracle Database are affected by CVE-2007-2112?

CVE-2007-2112 affects Oracle Database versions 10.1.0.5 and 10.2.0.3.

Can CVE-2007-2112 be exploited remotely?

CVE-2007-2112 allows remote authenticated users to potentially exploit the vulnerability.

What type of vulnerability is CVE-2007-2112?

CVE-2007-2112 is an unspecified vulnerability in the Authentication component of Oracle Database.