Oracle Database Server SQL Injection Flaw in Oracle Workspace Manager

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: MEDIUM

  CVE Identifier: CVE-2007-5511

---

  DESCRIPTION

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but there are insufficient details to be certain.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1001140

  Trend Micro Deep Security DPI Rule Name: 1001140 - Oracle Database Server SQL Injection Flaw in Oracle Workspace Manager

  AFFECTED SOFTWARE AND VERSION

• Oracle Oracle 9i Database Release 2
• Oracle Oracle10g Database Server Release 1
• Oracle Oracle10g Database Server Release 2