CVE-2009-3412

Severity

10%

Complexity

15%

Confidentiality

48%

Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html "Fix delivered via Oracle Universal Installer Patch 6640838"

Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors.

Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html "Fix delivered via Oracle Universal Installer Patch 6640838"

CVSS 2.0 Base Score 1. CVSS Attack Vector: local. CVSS Attack Complexity: high. CVSS Vector: (AV:L/AC:H/Au:S/C:P/I:N/A:N).

Overview

First reported 15 years ago

2010-01-13 01:30:00

Last updated 12 years ago

2012-10-23 03:11:00

Affected Software

Oracle Application Server 10g 10.1.2.3

10.1.2.3

Oracle Database Server 9.2.0.8

9.2.0.8

オラクル データベースサーバ 9.2.0.8DV

9.2.0.8dv

オラクル データベースサーバ 10g 10.1.0.5

10.1.0.5

References

http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html

1023438

TA10-012A

US Government Resource

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.