CVE-2011-0870: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Schema Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

9 affected components

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0870?

CVE-2011-0870 is classified as a high-severity vulnerability that can affect confidentiality, integrity, and availability.

How do I fix CVE-2011-0870?

To fix CVE-2011-0870, you should apply the latest patches provided by Oracle for the affected database versions.

What versions of Oracle are affected by CVE-2011-0870?

CVE-2011-0870 affects Oracle Database Server versions 10.1.0.5 through 11.2.0.2 and Oracle Enterprise Manager Grid Control versions 10.1.0.6 and 10.2.0.5.

Can CVE-2011-0870 be exploited remotely?

Yes, CVE-2011-0870 can be exploited by remote attackers, compromising the security of the database servers.

What components are impacted by CVE-2011-0870?

CVE-2011-0870 impacts the Schema Management component within Oracle Database Server and related products.