CVE-2009-1973: Medium severity Oracle Database Server vulnerability

Published Jul 14, 2009

Updated

Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies.

Affected Software

3 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Event History

Jul 14, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1973?

CVE-2009-1973 is classified as a medium severity vulnerability affecting Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.7.

How do I fix CVE-2009-1973?

To fix CVE-2009-1973, apply the latest security patches provided by Oracle for the affected database versions.

What impact does CVE-2009-1973 have on Oracle Database?

CVE-2009-1973 allows remote authenticated users to potentially compromise the confidentiality and integrity of data due to flaws in VPD policies.

Which Oracle Database versions are affected by CVE-2009-1973?

CVE-2009-1973 affects Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.7.

Who can exploit CVE-2009-1973?

CVE-2009-1973 can be exploited by remote authenticated users who have access to the affected Oracle Database systems.