CVE-2013-3760: High severity oracle database vulnerability

Published Jul 17, 2013

Updated

Unspecified vulnerability in the Oracle executable component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-3771.

Affected Software

5 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Event History

Jul 17, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3760?

CVE-2013-3760 has a medium severity rating but can affect confidentiality, integrity, and availability.

How do I fix CVE-2013-3760?

To mitigate CVE-2013-3760, it is recommended to apply the latest security patches provided by Oracle for affected versions.

What versions are affected by CVE-2013-3760?

CVE-2013-3760 affects Oracle Database Server versions 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3.

Can CVE-2013-3760 be exploited remotely?

CVE-2013-3760 is a local vulnerability, meaning it requires local user access to exploit.

Is there a workaround for CVE-2013-3760?

There are no known workarounds for CVE-2013-3760; patching is the recommended solution.