Description
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3984.
Affected products
- oracle / database_10g10.1.0.5 – 10.1.0.5
- oracle / database_10g10.2.0.3 – 10.2.0.3
- oracle / database_11i11.1.0.6 – 11.1.0.6
- oracle / database_9i9.2.0.8 – 9.2.0.8
- oracle / database_9i9.2.0.8dv – 9.2.0.8dv
Exploits & proofs of concept
- exploit-dbOracle 10g - SYS.LT.MERGEWORKSPACE SQL Injectionby sh2kerr
References
- VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/32291
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/45886
- MISChttp://www.securitytracker.com/id?1021050
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2825
Updated 17m ago · 8 sources