CVE-2011-0811: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Enterprise Config Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4, and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5, allows local users to affect confidentiality via unknown vectors.

Affected Software

5 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=10.1.0.5

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0811?

CVE-2011-0811 is considered a moderate severity vulnerability affecting Oracle Database and Oracle Enterprise Manager products.

How do I fix CVE-2011-0811?

To fix CVE-2011-0811, apply the latest security patches provided by Oracle for the affected versions of Oracle Database Server and Oracle Enterprise Manager.

What versions of Oracle products are affected by CVE-2011-0811?

CVE-2011-0811 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3, and 10.2.0.4, as well as Oracle Enterprise Manager Grid Control versions 10.1.0.6 and 10.2.0.5.

What type of attack can exploit CVE-2011-0811?

CVE-2011-0811 can be exploited by local users to potentially affect the confidentiality of sensitive data.

Is there a workaround for CVE-2011-0811?

There are no documented workarounds for CVE-2011-0811; patching remains the primary method of mitigation.