Vulnerabilities > CVE-2007-3855 - Unspecified vulnerability in Oracle Database Server

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oracle
nessus
exploit available
NVD
Published: 2007-07-18
Updated: 2024-11-21

Summary

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the DataGuard component (DB03), (2) SYS.DBMS_STANDARD in the PL/SQL component (DB10), (3) MDSYS.RTREE_IDX in the Spatial component (DB16), and (4) SQL Compiler (DB17). NOTE: a reliable researcher claims that DB17 is for using Views to perform unauthorized insert, update, or delete actions.

Vulnerable Configurations

Part Description Count
Application
Oracle
5

Exploit-Db

  • descriptionOracle 9i/10g evil views Change Passwords Exploit (CVE-2007-3855). CVE-2007-3855. Local exploits for multiple platform
    idEDB-ID:4203
    last seen2016-01-31
    modified2007-07-19
    published2007-07-19
    reporterbunker
    sourcehttps://www.exploit-db.com/download/4203/
    titleOracle 9i/10g Evil Views - Change Passwords Exploit
  • descriptionOracle Database SQL Compiler Views Unauthorized Manipulation. CVE-2007-3855. Local exploits for multiple platform
    idEDB-ID:30295
    last seen2016-02-03
    modified2007-07-12
    published2007-07-12
    reporterbunker
    sourcehttps://www.exploit-db.com/download/30295/
    titleOracle Database SQL Compiler Views Unauthorized Manipulation

Nessus

NASL familyDatabases
NASL idORACLE_RDBMS_CPU_JUL_2007.NASL
descriptionThe remote Oracle database server is missing the July 2007 Critical Patch Update (CPU) and therefore is potentially affected by security issues in the following components : - Advanced Queuing - DataGuard - JavaVM - Oracle Data Mining - Oracle Text - PL/SQL - Rules Manager - Spatial - SQL Compiler
last seen2020-06-02
modified2011-11-16
plugin id56057
published2011-11-16
reporterThis script is Copyright (C) 2011-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/56057
titleOracle Database Multiple Vulnerabilities (July 2007 CPU)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/57886/bunkerview.txt
idPACKETSTORM:57886
last seen2016-12-05
published2007-07-20
reporterAndrea Purificato
sourcehttps://packetstormsecurity.com/files/57886/bunkerview.txt.html
titlebunkerview.txt

Seebug

  • bulletinFamilyexploit
    descriptionNo description provided by source.
    idSSV:83727
    last seen2017-11-19
    modified2014-07-01
    published2014-07-01
    reporterRoot
    sourcehttps://www.seebug.org/vuldb/ssvid-83727
    titleOracle Database SQL Compiler Views Unauthorized Manipulation
  • bulletinFamilyexploit
    descriptionNo description provided by source.
    idSSV:7065
    last seen2017-11-19
    modified2007-07-20
    published2007-07-20
    reporterRoot
    sourcehttps://www.seebug.org/vuldb/ssvid-7065
    titleOracle 9i/10g evil views Change Passwords Exploit (CVE-2007-3855)
  • bulletinFamilyexploit
    descriptionNo description provided by source.
    idSSV:64812
    last seen2017-11-19
    modified2014-07-01
    published2014-07-01
    reporterRoot
    sourcehttps://www.seebug.org/vuldb/ssvid-64812
    titleOracle 9i/10g Evil Views - Change Passwords Exploit

References