CVE-2005-3438 Other in n/a

Critical 10.0 Published 2 Nov 2005 Updated 7 Aug 2024

Multiple unspecified vulnerabilities in Oracle Database Server components allow attackers to potentially compromise the database system.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: None listed

What is CVE-2005-3438?

CVE-2005-3438 is a critical vulnerability in Oracle Database Server, published on 2 Nov 2005.

Official description

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.

Which versions are affected by CVE-2005-3438?

It affects 1 product.

Products include Oracle Database Server.

How do I fix CVE-2005-3438?

No fix has been published for CVE-2005-3438 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-3438 being exploited?

There is no known exploitation of CVE-2005-3438 in the wild and no public exploit code.

All Oracle Database Server vulnerabilities

Sources

Also known as GHSA-chph-qcj7-xvv3.