CVE-2011-2253: High severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYSDBA.

Affected Software

6 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2253?

CVE-2011-2253 is classified as a high severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2011-2253?

To fix CVE-2011-2253, upgrade to the latest patched version of Oracle Database as recommended in Oracle's security updates.

Who is affected by CVE-2011-2253?

CVE-2011-2253 affects remote authenticated users of Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2.

What components are involved in CVE-2011-2253?

CVE-2011-2253 involves an unspecified vulnerability in the Core RDBMS component of Oracle Database.

What exploitation potential does CVE-2011-2253 have?

CVE-2011-2253 allows remote authenticated users to exploit the vulnerability, potentially affecting data confidentiality, integrity, and system availability.