Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.
References
Link | Resource |
---|---|
http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/16258 | |
http://www.kb.cert.org/vuls/id/777773 | Third Party Advisory US Government Resource |
http://marc.info/?l=bugtraq&m=111531683824209&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/20407 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-10 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-1495
Mitre link : CVE-2005-1495
JSON object : View
CWE
Products Affected
oracle
- oracle10g
- oracle9i
- application_server