CVE-2007-5505
published 2007-10-17CVE-2007-5505: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.66%
84.1th percentile
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the Export component (DB02), (2) Oracle Text (DB04), (3) Oracle Text (DB05), (4) Spatial component (DB07), and (5) Advanced Security Option (DB19).
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cf38-5cmw-7r2h: Buffer overflow in MDSYS
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-5897 [HIGH] CWE-119 GHSA-cf38-5cmw-7r2h: Buffer overflow in MDSYS
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure.
GHSA
GHSA-g3vv-27vh-7g43: Multiple unspecified vulnerabilities in Oracle Database 9
ghsa_unreviewed·2022-05-01
CVE-2007-5505 [HIGH] GHSA-g3vv-27vh-7g43: Multiple unspecified vulnerabilities in Oracle Database 9
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the Export component (DB02), (2) Oracle Text (DB04), (3) Oracle Text (DB05), (4) Spatial component (DB07), and (5) Advanced Security Option (DB19).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=119332677525918&w=2http://secunia.com/advisories/27251http://secunia.com/advisories/27409http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.htmlhttp://www.securitytracker.com/id?1018823http://www.us-cert.gov/cas/techalerts/TA07-290A.htmlhttp://www.vupen.com/english/advisories/2007/3524http://www.vupen.com/english/advisories/2007/3626http://marc.info/?l=bugtraq&m=119332677525918&w=2http://secunia.com/advisories/27251http://secunia.com/advisories/27409http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.htmlhttp://www.securitytracker.com/id?1018823http://www.us-cert.gov/cas/techalerts/TA07-290A.htmlhttp://www.vupen.com/english/advisories/2007/3524http://www.vupen.com/english/advisories/2007/3626
2007-10-17
Published