cbcvebase.
CVE-2005-1496
published 2005-05-11

CVE-2005-1496: The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

medium4.6CVSS 3.1
AVLACLAuNCPIPAP
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

Affected

12 ranges
VendorProductVersion rangeFixed in
oracleapplication_server——
oracleapplication_server——
oracleapplication_server——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——
oracleoracle10g——