Severity: : Medium
  CVE Kennungen: : CVE-2007-5504
  Advisory Date: 21 lipca 2015

  DESCRIPTION

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package.

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1001196
  Trend Micro Deep Security DPI Rule Name: 1001196 - Oracle Database Server DBMS_AQADM_SYS.DBLINK_INFO Buffer Overflow

  AFFECTED SOFTWARE AND VERSION:

  • Oracle Oracle Database 10.1.0.5
  • Oracle Oracle Database 9.0.1.5+