CVE-2011-0881: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the EMCTL component in Oracle Database Server 10.2.0.3, 10.2.0.4, and 11.1.0.7, and Oracle Enterprise Manager Grid Control 10.1.0.6, allows remote attackers to affect integrity via unknown vectors.

Affected Software

4 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=11.1.0.7

Oracle Enterprise Manager Grid Control=10.1.0.6

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0881?

CVE-2011-0881 is considered to have a moderate severity rating affecting the integrity of the vulnerable systems.

How do I fix CVE-2011-0881?

To remediate CVE-2011-0881, upgrade Oracle Database Server to a version that is not affected, such as 10.2.0.5 or higher, or apply the recommended patches from Oracle.

Which versions of Oracle are affected by CVE-2011-0881?

CVE-2011-0881 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, and 11.1.0.7, as well as Oracle Enterprise Manager Grid Control 10.1.0.6.

What types of attacks could exploit CVE-2011-0881?

CVE-2011-0881 could be exploited by remote attackers aiming to compromise the integrity of the databases.

Is there a workaround for CVE-2011-0881?

There are no specific workarounds for CVE-2011-0881; applying patches or upgrading the software is the recommended approach.