CVE-2010-2389: Low severity oracle database vulnerability

Published Oct 13, 2010

Updated

Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon.

Affected Software

7 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Oracle Fusion Middleware=11.1.1.1.0

Oracle Fusion Middleware=11.1.1.2.0

Event History

Oct 13, 2010

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2389?

CVE-2010-2389 has been assessed as a moderate severity vulnerability that may impact the integrity of affected systems.

How do I fix CVE-2010-2389?

To mitigate CVE-2010-2389, it is recommended to apply the latest patches provided by Oracle for the affected Oracle Database and Fusion Middleware versions.

What versions are affected by CVE-2010-2389?

CVE-2010-2389 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, as well as Fusion Middleware versions 11.1.1.1.0 and 11.1.1.2.0.

What type of vulnerability is CVE-2010-2389?

CVE-2010-2389 is an unspecified vulnerability in the Perl component that allows local users to affect the integrity of the system.

Can local attackers exploit CVE-2010-2389?

Yes, local attackers may exploit CVE-2010-2389 to potentially compromise the integrity of the system through unknown vectors.