Oracle Database Server Buffer Overflow In Multiple Procedures Of DBMS_SNAP_INTERNAL Package
Publish Date: 21 juillet 2015
Gravité: : Critique
Identifiant(s) CVE: : CVE-2007-2116
Date du conseil: 21 juillet 2015
Description
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.2.0.1 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMS_SNAP_INTERNAL package using the (1) SNAP_OWNER or (2) SNAP_NAME parameters.
Information Exposure Rating:
Apply associated Trend Micro DPI Rules.
Solutions
Trend Micro Deep Security DPI Rule Number: 1000988
Trend Micro Deep Security DPI Rule Name: 1000988 - Oracle Database Server Buffer Overflow In Multiple Procedures Of DBMS_SNAP_INTERNAL Package
Affected software and version:
- Oracle Oracle Database 10.2.0.1
- Oracle Oracle Database 9.0.1.5
- Oracle Oracle Database 9.2.0.7