Unscored CVE-2005-1496 EUVD-2005-1499GHSA-wh9g-3hpf-7h7f

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER …

Published May 11, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

References

http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html
20050505 Oracle 10g DBMS_SCHEDULER SESSION_USER issue mailing-list
13509 vdb-entry
oracle10g-gain-privileges(20410) vdb-entry