CVE-2010-0866
published 2010-04-13CVE-2010-0866: Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality…
PriorityP344medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
11.25%
95.5th percentile
Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor Oracle DB audit logs for any session with 'create session' privilege invoking DBMS_JVM_EXP_PERMS package calls, which is the exploitation vector for this CVE. ↗
- →Alert on unexpected Java IO privilege grants within Oracle DB sessions, particularly from low-privileged accounts that only hold 'create session' privilege. ↗
- →Detection scope should include Oracle 10g R2, 11g R1, and 11g R2 on Windows; these are the confirmed affected/exploitable platform versions. ↗
- ·Exploitation is limited to Windows-based Oracle DB deployments; Linux/Unix instances of the same versions are not affected by this specific exploit path. ↗
- ·The vulnerability requires the attacker to already hold 'create session' privilege on the Oracle DB; unauthenticated exploitation is not possible. ↗
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
GPL RPC sadmind TCP NETMGT_PROC_SERVICE CLIENT_DOMAIN overflow attempt
suricata·2010-09-23
CVE-1999-0977 GPL RPC sadmind TCP NETMGT_PROC_SERVICE CLIENT_DOMAIN overflow attempt
GPL RPC sadmind TCP NETMGT_PROC_SERVICE CLIENT_DOMAIN overflow attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL RPC sadmind TCP NETMGT_PROC_SERVICE CLIENT_DOMAIN overflow attempt"; flow:established,to_server; content:"|00 01 87 88|"; depth:4; offset:16; content:"|00 00 00 01|"; within:4; distance:4; byte_jump:4,4,relative,align; byte_jump:4,4,relative,align; byte_jump:4,124,relative,align; byte_jump:4,20,relative,align; byte_test:4,>,512,4,relative; content:"|00 00 00 00|"; depth:4; offset:8; reference:bugtraq,0866; reference:bugtraq,866; reference:cve,1999-0977; classtype:attempted-admin; sid:2101912; rev:11; metadata:created_at 2010_09_23, cve CVE_1999_0977, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at
Metasploit
Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution
metasploit
Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution
Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution
This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows any user with create session privilege to grant themselves java IO privileges. Identified by David Litchfield. Works on 10g R2, 11g R1 and R2 (Windows only)
Metasploit
Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
metasploit
Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows any user with create session privilege to grant themselves java IO privileges. Identified by David Litchfield. Works on 11g R1 and R2 (Windows only).
No writeups or analysis indexed.
2010-04-13
Published