CVE-2009-1994: Medium severity Oracle Database Server vulnerability

Published Oct 22, 2009

Updated

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVTCMTCBK.

Affected Software

1 affected component

Oracle Database Server=10.1.0.5

Event History

Oct 22, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1994?

The severity of CVE-2009-1994 is considered to be medium as it allows remote authenticated users to affect the confidentiality, integrity, and availability of the system.

How do I fix CVE-2009-1994?

To fix CVE-2009-1994, it is recommended to apply the latest security patches provided by Oracle for the affected version of Oracle Database.

Who is affected by CVE-2009-1994?

CVE-2009-1994 affects users of Oracle Database version 10.1.0.5, particularly those utilizing the Oracle Spatial component.

What components of Oracle Database are impacted by CVE-2009-1994?

CVE-2009-1994 specifically impacts the Oracle Spatial component, which is part of the database system.

Can CVE-2009-1994 be exploited remotely?

Yes, CVE-2009-1994 can be exploited by remote authenticated users, potentially allowing unauthorized access to data.