Vulnerabilities > CVE-2007-3856 - Unspecified vulnerability in Oracle Database Server and Oracle10G

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
oracle
nessus
NVD
Published: 2007-07-18
Updated: 2017-07-29

Summary

Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7, 9.2.0.8, and 9.2.0.8DV has unknown impact and remote authenticated attack vectors related to DMSYS.DMP_SYS, aka DB04. As the vulnerability impact is unspecified, the impact has been set to a default value of "Obtain Other Access."

Vulnerable Configurations

Part Description Count
Application
Oracle
6

Nessus

NASL familyDatabases
NASL idORACLE_RDBMS_CPU_JUL_2007.NASL
descriptionThe remote Oracle database server is missing the July 2007 Critical Patch Update (CPU) and therefore is potentially affected by security issues in the following components : - Advanced Queuing - DataGuard - JavaVM - Oracle Data Mining - Oracle Text - PL/SQL - Rules Manager - Spatial - SQL Compiler
last seen2020-06-02
modified2011-11-16
plugin id56057
published2011-11-16
reporterThis script is Copyright (C) 2011-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/56057
titleOracle Database Multiple Vulnerabilities (July 2007 CPU)

References