QwikSec

Security Database

CVE

CWE

Training

CVE-2007-2112

Published: Apr 18, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. NOTE: as of 20070424, Oracle has not disputed reliable claims that this issue allows remote authenticated users to bypass the AUTH_ALTER_SESSION security policies via a logon trigger ("AFTER LOGON ON DATABASE" trigger directive), a related issue to CVE-2006-0547.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_CERT

http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.red-database-security.com/advisory/bypass_oracle_logon_trigger.html

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_HP

http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html

x_refsource_MISC

20070418 Advisory: Bypass Oracle Logon Trigger

mailing-list

x_refsource_BUGTRAQ

vendor-advisory

x_refsource_HP

http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2007-2112 - Security Vulnerability | QwikSec