Oracle Database Network Authentication Component Remote Code Execution Vulnerability

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2009-1019

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003642

  Trend Micro Deep Security DPI Rule Name: 1003642 - Oracle Database Network Authentication Component Remote Code Execution Vulnerability

  AFFECTED SOFTWARE AND VERSION

• oracle database_server 10.1.0.4
• oracle database_server 10.1.0.5
• oracle database_server 11.1.0.7
• oracle database_server 9.2.0.8
• oracle database_server 9.2.0.8dv