CVE-2007-3856: Medium severity Oracle Database Server vulnerability

Published Jul 18, 2007

Updated

Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7, 9.2.0.8, and 9.2.0.8DV has unknown impact and remote authenticated attack vectors related to DMSYS.DMPSYS, aka DB04.

Affected Software

6 affected components

Oracle Database Server=9.2.0.7

Oracle Database Server=9.2.0.8

Oracle Database Server=9.2.0.8dv

Oracle Database Server=10.2.0.2

Oracle Database Server=10.2.0.3

Oracle Oracle10g=standard_10.1.0.5

Event History

Jul 18, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3856?

The severity of CVE-2007-3856 has not been explicitly defined, but it involves unspecified vulnerabilities that could allow remote authenticated attacks.

How do I fix CVE-2007-3856?

To fix CVE-2007-3856, upgrade to a patched version of the Oracle Database identified in the vendor's release notes.

What versions of Oracle Database are affected by CVE-2007-3856?

CVE-2007-3856 affects Oracle Database versions 9.2.0.7, 9.2.0.8, 10.2.0.2, 10.2.0.3, and the Standard Edition 10.1.0.5.

Can CVE-2007-3856 be exploited remotely?

Yes, CVE-2007-3856 can be exploited by remote authenticated attackers.

Is there a workaround for CVE-2007-3856?

No specific workarounds are provided for CVE-2007-3856, so upgrading to a secure version is recommended.