Oracle Database Server DBMS_CDC_PUBLISH Multiple Procedure SQL Injection

  Severity: LOW
  CVE Identifier: CVE-2010-0870

  DESCRIPTION

Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_PUBLISH.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004128
  Trend Micro Deep Security DPI Rule Name: 1004128 - Oracle Database Server DBMS_CDC_PUBLISH Multiple Procedure SQL Injection

  AFFECTED SOFTWARE AND VERSION

  • oracle database_server 9.2.0.8
  • oracle database_server 9.2.0.8dv