7.2

CVE-2007-1442

Exploit
Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Database Server Version 10.2.1 Edition enterprise
Oracle ≫ Database Server Version 10.2.1 Edition personal
Oracle ≫ Database Server Version 10.2.1 Edition standard
Oracle ≫ Database Server Version 10.2.2 Edition enterprise
Oracle ≫ Database Server Version 10.2.2 Edition personal
Oracle ≫ Database Server Version 10.2.2 Edition standard
Oracle ≫ Database Server Version 10.2.3 Edition enterprise
Oracle ≫ Database Server Version 10.2.3 Edition personal
Oracle ≫ Database Server Version 10.2.3 Edition standard
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.384
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://argeniss.com/research/10MinSecAudit.zip
http://osvdb.org/33979
http://secunia.com/advisories/24475
Vendor Advisory
http://www.securityfocus.com/bid/22905
Exploit