CVE-2011-0852: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Security Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4; and Oracle Enterprise Manager Grid Control 10.1.0.6; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Audit Administration.

Affected Software

4 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=10.1.0.5

Oracle Enterprise Manager Grid Control=10.1.0.6

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0852?

CVE-2011-0852 has a high severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2011-0852?

To fix CVE-2011-0852, users should apply the latest security patches provided by Oracle for their affected Oracle Database and Enterprise Manager versions.

Which Oracle products are affected by CVE-2011-0852?

CVE-2011-0852 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4 and Oracle Enterprise Manager Grid Control version 10.1.0.6.

Can CVE-2011-0852 be exploited remotely?

Yes, CVE-2011-0852 allows remote attackers to exploit the vulnerability, affecting the security of the database.

What are the potential impacts of CVE-2011-0852?

The potential impacts of CVE-2011-0852 include unauthorized access to sensitive data and disruption of database services.