Back to search
CVE-2007-5513
Published: Oct 17, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
x_refsource_CONFIRM
26107
vdb-entry
x_refsource_BID
20071017 Oracle audit issue with XMLDB ftp service
mailing-list
x_refsource_BUGTRAQ
3247
third-party-advisory
x_refsource_SREASON
ADV-2007-3524
vdb-entry
x_refsource_VUPEN
ADV-2007-3626
vdb-entry
x_refsource_VUPEN
TA07-290A
third-party-advisory
x_refsource_CERT
SSRT061201
vendor-advisory
x_refsource_HP
HPSBMA02133
vendor-advisory
x_refsource_HP
1018823
vdb-entry
x_refsource_SECTRACK
27409
third-party-advisory
x_refsource_SECUNIA
27251
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now