CVE-2007-3855: Medium severity Oracle Database Server vulnerability

Published Jul 18, 2007

Updated

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMSDRS in the DataGuard component (DB03), (2) SYS.DBMSSTANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREEIDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.

Affected Software

5 affected components

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.8

Oracle Database Server=9.2.0.8dv

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Event History

Jul 18, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3855?

CVE-2007-3855 is considered a medium severity vulnerability due to the potential impact on databases accessible to authenticated users.

How do I fix CVE-2007-3855?

To fix CVE-2007-3855, you should apply available patches or upgrades provided by Oracle for the affected database versions.

What versions of Oracle Database are affected by CVE-2007-3855?

CVE-2007-3855 affects Oracle Database versions 9.0.1.5, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3.

Who can exploit CVE-2007-3855?

CVE-2007-3855 can be exploited by remote authenticated users who have access to the vulnerable Oracle Database versions.

What are the potential impacts of CVE-2007-3855?

The potential impacts of CVE-2007-3855 include unauthorized access to sensitive data and disruption of database operations.