CVE-2005-1496
Published May 11, 2005
Last updated 7 years ago
Overview
- Description
- The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C1B82E1-D1AD-46F2-8B95-117F38563FC6"
},
{
"criteria": "cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FC5FDD9-F24C-4DA2-9CE3-96522DB4A10E"
},
{
"criteria": "cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDECF110-F375-4A3C-8BA9-1CF69B6EF027"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD4E604B-6C0D-474F-A3A9-B07EF0A7D2E2"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8667E51F-86A9-4181-8FCC-BECC6F50913B"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C84E349-48A8-4800-A300-AACEC8659656"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "323353FE-7ECD-4668-BDB1-3E5CA8F3F9A9"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:personal_10.1.0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD4237F0-BE51-4FCD-9CF1-83E54723390A"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8975840-9843-4034-BBED-B31A9BA16DF0"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0A39665-BB49-4135-9850-8CF9E69546FA"
},
{
"criteria": "cpe:2.3:a:oracle:oracle10g:standard_10.1.0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2764001-8B54-47AD-A265-0C0B0F691A15"
}
],
"operator": "OR"
}
]
}
]