CVE-2011-0876: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Enterprise Manager Console component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect integrity via unknown vectors related to Security.

Affected Software

9 affected components

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0876?

The severity of CVE-2011-0876 is considered high due to its potential impact on the integrity of the Oracle Database.

How do I fix CVE-2011-0876?

To fix CVE-2011-0876, users should apply the latest patches released by Oracle for the affected database versions.

Which Oracle Database versions are affected by CVE-2011-0876?

CVE-2011-0876 affects Oracle Database versions 10.1.0.5, 10.2.0.3 to 10.2.0.5, and 11.1.0.7 to 11.2.0.2.

Can remote attackers exploit CVE-2011-0876?

Yes, remote attackers can exploit CVE-2011-0876, potentially affecting the integrity of the Oracle Database.

Is Oracle Enterprise Manager Grid Control affected by CVE-2011-0876?

Yes, Oracle Enterprise Manager Grid Control versions 10.1.0.6 and 10.2.0.5 are also affected by CVE-2011-0876.