CVE-2012-0534: Medium severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.

Affected Software

6 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Event History

May 3, 2012

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0534?

CVE-2012-0534 is classified as having a moderate severity rating.

How do I fix CVE-2012-0534?

To fix CVE-2012-0534, upgrade to the latest patched version of Oracle Database as specified by Oracle security advisories.

Who is affected by CVE-2012-0534?

CVE-2012-0534 affects remote authenticated users of Oracle Database Server versions 10.2.0.3 to 11.2.0.3.

What types of attacks does CVE-2012-0534 allow?

CVE-2012-0534 may allow attackers to affect integrity through unspecified vectors related to session creation.

Is there a workaround for CVE-2012-0534?

There are no specific workarounds listed for CVE-2012-0534 other than applying the recommended security updates.