CVE-2007-3857

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1) unspecified vectors (DB05), (2) CTXSYS.DRVXMD (DB06), (3) CTXSYS.DRI_MOVE_CTXSYS (DB07), (4) CTXSYS.DRVXMD (DB08), and (b) JavaVM (DB14).

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2007-07-18

Last modified

2024-08-07

Affected products

• Database Server (Oracle)

References

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143
• http://secunia.com/advisories/26114
• http://secunia.com/advisories/26166
• http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
• http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
• http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
• http://www.securitytracker.com/id?1018415
• http://www.us-cert.gov/cas/techalerts/TA07-200A.html
• http://www.vupen.com/english/advisories/2007/2562
• http://www.vupen.com/english/advisories/2007/2635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35490