CVE-2009-0985: High severity oracle database vulnerability

Published Apr 15, 2009

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMPFULLDATABASE role to affect confidentiality, integrity, and availability.

Affected Software

3 affected components

Oracle Database 10g=10.1.0.5

Oracle Database 10g=10.2.0.4

Oracle Database 11g=11.1.0.6

Event History

Apr 15, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-0985?

CVE-2009-0985 is considered to have a critical severity level due to potential impacts on confidentiality, integrity, and availability.

Who is affected by CVE-2009-0985?

CVE-2009-0985 affects remote authenticated users with the IMP_FULL_DATABASE role in Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6.

How do I fix CVE-2009-0985?

To fix CVE-2009-0985, it's recommended to apply the latest security patches provided by Oracle for the affected database versions.

What versions of Oracle Database are vulnerable to CVE-2009-0985?

CVE-2009-0985 impacts Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6.

What are the potential impacts of CVE-2009-0985?

CVE-2009-0985 can affect the confidentiality, integrity, and availability of the Oracle Database for affected users.