CVE-2011-0816: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the CMDB Metadata & Instance APIs component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected Software

9 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=10.2.0.5

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0816?

CVE-2011-0816 has been rated as a moderate severity vulnerability.

How do I fix CVE-2011-0816?

To fix CVE-2011-0816, apply the latest security patches provided by Oracle for the affected versions of the database and Grid Control.

Which versions of Oracle products are affected by CVE-2011-0816?

CVE-2011-0816 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3 to 10.2.0.5, 11.1.0.7, and 11.2.0.1 to 11.2.0.2, as well as Oracle Enterprise Manager Grid Control versions 10.1.0.6 and 10.2.0.5.

Can CVE-2011-0816 be exploited remotely?

Yes, CVE-2011-0816 can be exploited by remote authenticated users.

What are the potential impacts of CVE-2011-0816?

CVE-2011-0816 may allow authenticated users to affect the confidentiality of data within the affected Oracle products.