Description
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package.
References
- http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
- ADV-2007-3524 vdb-entry
- ADV-2007-3626 vdb-entry
- TA07-290A third-party-advisory
- SSRT061201 vendor-advisory
- 26235 vdb-entry
- 20071029 Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO mailing-list
- http://www.appsecinc.com/resources/alerts/oracle/2007-08.shtml
- 1018823 vdb-entry
- 27409 third-party-advisory
- 27251 third-party-advisory