OSVDB ID: 32910

Title: Oracle Database Log Miner SYS.DBMS_LOGMNR ADD_LOGFILE Procedure Overflow

Info

Disclosure

Jan 17, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Security Tracker: 1017522
CVE ID: 2007-0271 (see also: NVD)
Secunia Advisory ID: 23794
ISS X-Force ID: 31541
Related OSVDB ID: 32872 32875 32881 32894 32895 32906 32907 32908 32909 32911 32912 32913 32914 32915 32916 32917 32918 32919 32920 32921 32922
Keyword: DB04
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-01/0564.html
News Article: http://news.com.com/Oracle+plugs+51+security+flaws/2100-1002_3-6150671.html
Other Advisory URL: http://www.appsecinc.com/resources/alerts/oracle/2007-01.shtml
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html
US-CERT Cyber Security Alert: TA07-017A

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/32910