Vulnerability Details CVE-2009-1985
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://osvdb.org/59111
- http://secunia.com/advisories/37027
- http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
- http://www.securityfocus.com/bid/36745
- http://www.securitytracker.com/id?1023057
- http://www.us-cert.gov/cas/techalerts/TA09-294A.html
- http://osvdb.org/59111
- http://secunia.com/advisories/37027
- http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
- http://www.securityfocus.com/bid/36745
- http://www.securitytracker.com/id?1023057
- http://www.us-cert.gov/cas/techalerts/TA09-294A.html
Products affected by CVE-2009-1985
-
cpe:2.3:a:oracle:database_server:10.1.0.5
-
cpe:2.3:a:oracle:database_server:10.2.0.4
-
cpe:2.3:a:oracle:database_server:9.2.0.8
-
cpe:2.3:a:oracle:database_server:9.2.0.8dv