CVE-2009-0991

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/53737
http://secunia.com/advisories/34693
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/34461	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1022052	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.html	Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/50026

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:database_10g:10.1.0.5:::::::*
	cpe:2.3:a:oracle:database_10g:10.2.0.4:::::::*
	cpe:2.3:a:oracle:database_11g:11.1.0.7:::::::*
	cpe:2.3:a:oracle:database_9i:9.2.0.8:::::::*
	cpe:2.3:a:oracle:database_9i:9.2.0.8dv:::::::*

History

No history.

Information

Published : 2009-04-15 10:30

Updated : 2024-02-28 11:21

NVD link : CVE-2009-0991

Mitre link : CVE-2009-0991

CVE.ORG link : CVE-2009-0991

JSON object : View

Products Affected

oracle

database_10g
database_9i
database_11g

CWE

NVD-CWE-noinfo

{"id": "CVE-2009-0991", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-04-15T10:30:00.640", "references": [{"url": "http://osvdb.org/53737", "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/34693", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/34461", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id?1022052", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA09-105A.html", "tags": ["Third Party Advisory", "US Government Resource"], "source": "secalert_us@oracle.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50026", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Listener en Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 y 11.1.0.7 permite a atacantes remotos afectar la disponibilidad a trav\u00e9s de vectores desconocidos, una vulnerabilidad diferente a CVE-2009-1970."}], "lastModified": "2017-08-17T01:30:08.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB9DC5FD-9892-47BD-8F35-A3D4556952A1"}, {"criteria": "cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7940F99-44F2-499B-ABEC-997B9BF7EE1D"}, {"criteria": "cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "086DC59A-A1F4-4345-B43E-6EE7E21AF0BA"}, {"criteria": "cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35853080-470C-415B-B15B-D93A6DE856FF"}, {"criteria": "cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37FDC572-7FE0-41B2-99D6-139819781038"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}