CVE-2011-0879: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Instance Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect integrity via unknown vectors.

Affected Software

9 affected components

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0879?

CVE-2011-0879 is rated as a high severity vulnerability due to its potential impact on the integrity of affected Oracle Database Server and Oracle Enterprise Manager systems.

How do I fix CVE-2011-0879?

To mitigate CVE-2011-0879, users should apply the latest security patches provided by Oracle for their affected database versions.

Which versions of Oracle are affected by CVE-2011-0879?

CVE-2011-0879 affects Oracle Database Server versions 10.1.0.5 through 11.2.0.2 and Oracle Enterprise Manager Grid Control versions 10.1.0.6 and 10.2.0.5.

Can CVE-2011-0879 be exploited remotely?

Yes, CVE-2011-0879 can be exploited remotely by attackers to affect the integrity of the targeted systems.

What components are impacted by CVE-2011-0879?

CVE-2011-0879 specifically impacts the Instance Management component of the Oracle Database Server and Oracle Enterprise Manager Grid Control.