Schweregrad: : Medium
  Data do informe: 15 fevereiro 2011

  Descrição

 This vulnerability allows SYSDBA access to the Oracle database by utilising a user who has the BECOME USER system privilege, execute privileges on KUPP$PROC.CHANGE_USER and CREATE SESSION. A user with these privileges can become SYS (but not SYSDBA) and then use an immediate debug event to cause a debugger to flip the SYSDBA bit in the PGA to set a dedicated server session to an SYSDBA one, from there the user can do anything else. The user needs to have these privileges so its not an open and shut case but serious in that a privilege escalation is still possible.

  Exposição das informações

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  Solução

  Trend Micro Deep Security DPI Rule Number: 1001179
  Trend Micro Deep Security DPI Rule Name: 1001179 - Oracle Database Server USER System Privilege Vulnerability

  Software infectado e versão:

  • Oracle
  • Oracle Database Server