| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 10.1.0.2= 10.1.0.3= 10.1.0.3.1 | |
| oracle10g | = enterprise_10.1.0.2= enterprise_10.1.0.3= enterprise_10.1.0.3.1= personal_10.1.0.2= personal_10.1.0.3= personal_10.1.0.3.1= standard_10.1.0.2= standard_10.1.0.3= standard_10.1.0.3.1 |
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free