Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAME Jan 25 2007 07:36PM
Steven M. Christey (coley mitre org)

>Any Oracle database user with EXECUTE privilege on the package
>SYS.DBMS_LOGREP_UTIL can exploit this vulnerability. Exploitation of
>this vulnerability allows an attacker to execute arbitrary code.

This statement is inconsistent with Oracle's CPU, which states that
DB08 (CVE-2007-0274) has Parti...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus