search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Oracle Database vulnerable to privilege escalation

Vulnerability Note VU#809457

Original Release Date: 2007-04-18 | Last Revised: 2007-04-24

Overview

A vulnerability in Oracle Database for Microsoft Windows could allow a remote attacker to log on to the system with elevated privileges.

Description

A vulnerability exists in Oracle Database's Core Relational Database Management System (RDBMS) that may allow a remote attacker to log on to the system with elevated privileges. According to NGSSoftware-OracleCPUAPR2007:

Due to the way that Windows XP with Simple File Sharing enabled logs on users it is possible for an attacker to gain DBA access to the Oracle server.

Note that this issue affects Oracle Database versions including 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 installed in Microsoft Windows.

Impact

A remote attacker could log on to a vulnerable system and gain elevated privileges.

Solution

Apply a patch
See the Oracle Critical Patch Update - April 2007 for information about obtaining upgrades.


Disable simple file sharing

Disabling simple file sharing may mitigate this vulnerability. See Microsoft Knowledgebase Article 307874 for more details.

Vendor Information

809457
 
Affected   Unknown   Unaffected

Oracle Corporation

Notified:  April 18, 2007 Updated:  April 18, 2007

Status

  Vulnerable

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Refer to Oracle Critical Patch Update - April 2007.

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Credit

This issue is addressed in Oracle Critical Patch Update - April 2007

This document was written by Chris Taschner.

Other Information

CVE IDs: None
Severity Metric: 8.27
Date Public: 2007-04-17
Date First Published: 2007-04-18
Date Last Updated: 2007-04-24 18:06 UTC
Document Revision: 26

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.