CVE-2011-0880: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-0832 and CVE-2011-0835.

Affected Software

3 affected components

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=11.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0880?

CVE-2011-0880 is considered to have a critical impact on confidentiality, integrity, and availability.

How do I fix CVE-2011-0880?

To fix CVE-2011-0880, apply the Oracle Database patches for versions 11.1.0.7, 11.2.0.1, and 11.2.0.2.

Who is affected by CVE-2011-0880?

CVE-2011-0880 affects users of Oracle Database Server versions 11.1.0.7, 11.2.0.1, and 11.2.0.2.

What types of attacks can exploit CVE-2011-0880?

CVE-2011-0880 can be exploited by remote authenticated users though the specific attack vectors remain unspecified.

Is CVE-2011-0880 related to other vulnerabilities?

CVE-2011-0880 is a different vulnerability than CVE-2011-0832 and CVE-2011-0835.