Description

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

Remediation

References

CVE-2005-1496

Related Vulnerabilities

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2004-0836)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4249)

WordPress Plugin Asset CleanUp:Page Speed Booster Cross-Site Scripting (1.3.6.7)

Joomla! Core 3.x.x Security Bypass (3.2.0 - 3.8.1)

WordPress Plugin Bulk Page Creator Cross-Site Scripting (1.0.9)

Severity

Medium

Classification

CVE-2005-1496

Tags

Missing Update Known Vulnerabilities