CVE-2011-0831: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Enterprise Config Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected Software

9 affected components

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0831?

CVE-2011-0831 is considered to have a moderate impact on confidentiality due to its nature of affecting remote authenticated users.

How do I fix CVE-2011-0831?

To fix CVE-2011-0831, you should apply the latest patches and updates provided by Oracle for the affected database and enterprise manager versions.

Which versions are affected by CVE-2011-0831?

CVE-2011-0831 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2, along with Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5.

Who is vulnerable to CVE-2011-0831?

Remote authenticated users of the affected Oracle Database and Enterprise Manager versions are vulnerable to CVE-2011-0831.

What impact does CVE-2011-0831 have on my system?

CVE-2011-0831 could potentially allow remote authenticated users to affect the confidentiality of data within the Oracle databases and applications.