CVE-2007-5897

Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure.

CVSS v2.0 8.5 HIGH

8.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/40081
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
http://www.securityfocus.com/archive/1/482918/100/100/threaded
http://www.securityfocus.com/bid/26243

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:database_server::::::::
	cpe:2.3:a:oracle:database_server:9.2.0.1:::::::*
	cpe:2.3:a:oracle:database_server:9.2.0.2:::::::*
	cpe:2.3:a:oracle:database_server:9.2.0.3:::::::*
	cpe:2.3:a:oracle:database_server:9.2.0.4:::::::*
	cpe:2.3:a:oracle:database_server:9.2.0.5:::::::*
	cpe:2.3:a:oracle:database_server:9.2.0.6:::::::*
	cpe:2.3:a:oracle:database_server:10.1.0.2:::::::*
	cpe:2.3:a:oracle:database_server:10.1.0.3:::::::*
	cpe:2.3:a:oracle:database_server:10.1.0.4:::::::*

History

No history.

Information

Published : 2007-11-08 21:46

Updated : 2023-12-10 10:40

NVD link : CVE-2007-5897

Mitre link : CVE-2007-5897

CVE.ORG link : CVE-2007-5897

JSON object : View

Products Affected

oracle

database_server

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-5897", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-11-08T21:46:00.000", "references": [{"url": "http://osvdb.org/40081", "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/482918/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26243", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en MDSYS.SDO_CS de Oracle Database Server 8iR3, 9iR1, 9iR2 hasta 9.2.0.6, y 10gR1 hasta 10.1.0.4 permite a usuarios autenticados remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y ejecutar c\u00f3digo de su elecci\u00f3n mediante la funci\u00f3n TRANSFORM. NOTA: este asunto podr\u00eda estar ya cubierto por CVE-2007-5515, CVE-2007-5509, o CVE-2007-5505, pero no hay suficientes detalles como para estar seguros."}], "lastModified": "2018-10-15T21:46:53.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A77562B-D1A5-450D-9288-3FC7145E9292"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D1C89A9-5512-49E2-B932-9CE68323041B"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDDD6D73-8BF9-4529-9B54-EA2470E9A4D8"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3100BD74-28EF-49B8-AF03-B3298D25DF60"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4C63EC8-73D7-46AE-81E7-04DF212BC8B5"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"}, {"criteria": "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07F11F24-415A-4E36-9D03-5B7594356183"}, {"criteria": "cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "553BAC35-0A37-40C2-A150-F34D59D097F4"}, {"criteria": "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4019F72-9031-4CA6-B39A-AFC203D9D464"}, {"criteria": "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}