CVE-2007-2110 — Oracle Database Server vulnerability

3 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.1%
top 68.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Database Server
Timeline
PublishedApr 18
Latest updateMay 1

Description

Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadConte…

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/database_server10.1.0.4, 9.0.1.5, 9.2.0.7+2

🔴Vulnerability Details

2
GHSA
GHSA-v7xc-f3qv-vv8j: Unspecified vulnerability in the Core RDBMS component for Oracle Database 9↗2022-05-01
▶
CVEList
CVE-2007-2110: Unspecified vulnerability in the Core RDBMS component for Oracle Database 9↗2007-04-18
▶
CVE-2007-2110 — Oracle Database Server vulnerability | cvebase