| Package | Affected versions | Patched versions |
|---|---|---|
| database server | = 10.2.1= 10.2.2= 10.2.3 |
Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free