Description (CNA)
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=bugtraq&m=111385690419118&w=2
- http://www.kb.cert.org/vuls/id/948486
- http://www.us-cert.gov/cas/techalerts/TA05-117A.html
- http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
ADP enrichment
No English description supplied.