Oracle Database Server SQL Injection In Multiple Procedures Of SDO_GEOM Package
2015年7月21日
危険度: 中
CVE識別番号: CVE-2008-1813
情報公開日: 7 21, 2015
概要
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ in the Advanced Queuing component, aka DB01; (2) Core RDBMS, aka DB03; (3) SDO_GEOM in Oracle Spatial, aka DB06; (4) Export, aka DB12; and (5) DBMS_STATS in Query Optimizer, aka DB13. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB06 is SQL injection, and DB13 occurs when the OUTLN account is reset to use a hard-coded password.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1002429
Trend Micro Deep Security DPI Rule Name: 1002429 - Oracle Database Server SQL Injection In Multiple Procedures Of SDO_GEOM Package
影響を受けるソフトウェア
- Oracle Database 10g 10.1.0.5
- Oracle Database 10g 10.2.0.3
- Oracle Database 9i 9.0.1.5
- Oracle Database 9i 9.0.1.5 FIPS+
- Oracle Database 9i 9.2.0.8
- Oracle Database 9i 9.2.0.8DV