Severity: : Critical
  CVE Kennungen: : CVE-2007-2116
  Advisory Date: 21 de июля de 2015

  DESCRIPTION

Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.2.0.1 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMS_SNAP_INTERNAL package using the (1) SNAP_OWNER or (2) SNAP_NAME parameters.

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000988
  Trend Micro Deep Security DPI Rule Name: 1000988 - Oracle Database Server Buffer Overflow In Multiple Procedures Of DBMS_SNAP_INTERNAL Package

  AFFECTED SOFTWARE AND VERSION:

  • Oracle Oracle Database 10.2.0.1
  • Oracle Oracle Database 9.0.1.5
  • Oracle Oracle Database 9.2.0.7