CVE-2009-2000: Medium severity Oracle Database Server vulnerability
Published Oct 22, 2009
·Updated
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
Affected Software
1 affected component
Oracle Database Server=11.1.0.7
Event History
Oct 22, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is remotely exploitable and requires no authentication, according to the supplied vector. The affected component is Oracle Database Authentication in Oracle Database 11.1.0.7.
2
What is the likely impact if exploitation succeeds?
The stated impact is a loss of confidentiality. The provided vector does not indicate integrity or availability impact.
3
Are attack prerequisites or temporary mitigations known?
The available information describes the attack vectors as unknown and does not provide a workaround or mitigation. It therefore cannot establish any specific prerequisite beyond remote network reachability and lack of required authentication.