Security Advisory

CVE-2005-4832

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-03-03 20:00:00

Last updated 2024-08-08 00:01:23

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197.

← Browse all CVEs View on cve.org ↗