Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-01-19T05:00:00
Updated: 2024-08-08T00:46:12.509Z
Reserved: 2005-01-07T00:00:00
Link: CVE-2004-1370
Vulnrichment
No data.
NVD
Status : Modified
Published: 2004-08-04T04:00:00.000
Modified: 2024-11-20T23:50:43.030
Link: CVE-2004-1370
Redhat
No data.