CVE-2011-0882: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Content Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler.

Affected Software

7 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0882?

CVE-2011-0882 has a severity rating that indicates it may lead to significant compromise of confidentiality, integrity, and availability.

How do I fix CVE-2011-0882?

To fix CVE-2011-0882, apply the necessary patches provided in the Oracle Critical Patch Update.

What versions of Oracle Database are affected by CVE-2011-0882?

CVE-2011-0882 affects Oracle Database versions 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7.

What versions of Oracle Enterprise Manager Grid Control are affected by CVE-2011-0882?

CVE-2011-0882 impacts Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5, and 11.1.0.1.

Are there any workarounds for CVE-2011-0882?

There are no officially documented workarounds for CVE-2011-0882; applying the patch is the recommended action.