CVE-2010-2389

2010-10-1400:00:20

[email protected]

web.nvd.nist.gov

cve-2010-2389

vulnerability

perl component

oracle database server

fusion middleware

local users

integrity

nvd

1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon.

Affected configurations

NVD

Node

oracledatabase_serverMatch10.1.0.5

oracledatabase_serverMatch10.2.0.3

oracledatabase_serverMatch10.2.0.4

oracledatabase_serverMatch11.1.0.7

oracledatabase_serverMatch11.2.0.1

Node

oraclefusion_middlewareMatch11.1.1.1.0

oraclefusion_middlewareMatch11.1.1.2.0

CPENameOperatorVersion
oracle:database_serveroracle database servereq10.1.0.5
oracle:database_serveroracle database servereq10.2.0.3
oracle:database_serveroracle database servereq10.2.0.4
oracle:database_serveroracle database servereq11.1.0.7
oracle:database_serveroracle database servereq11.2.0.1

CPE	Name	Operator	Version
oracle:database_server	oracle database server	eq	10.1.0.5
oracle:database_server	oracle database server	eq	10.2.0.3
oracle:database_server	oracle database server	eq	10.2.0.4
oracle:database_server	oracle database server	eq	11.1.0.7
oracle:database_server	oracle database server	eq	11.2.0.1