CVE-2005-3438

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.87% chance of exploitation in the next 30 days, 93th percentile

Published

2005-11-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038061.html

References

• CVE Record
• NVD entry

Related

• CVE-2005-3433
• CVE-2005-3469
• CVE-2005-3432
• CVE-2005-3473
• CVE-2005-3423
• CVE-2005-3475