Vulnerability in Oracle Application_server

CVE-2005-1496

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

EPSS: 0.383 (98.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Application_server — versions 10.1.0.2, 10.1.0.3, 10.1.0.3.1
Oracle Oracle10g — versions enterprise_10.1.0.2, enterprise_10.1.0.3, enterprise_10.1.0.3.1
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)