Check Point Reference: | CPAI-2005-227 |
Date Published: | 17 Nov 2009 |
Severity: | Critical |
Last Updated: | Tuesday 17 November, 2009 |
Source: | |
Industry Reference: | CVE-2005-1197 |
Protection Provided by: |
Security Gateway |
Who is Vulnerable? | |
Vulnerability Description | Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user in order to better manage the data. Stored procedures and functions, or subprograms, are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. There exists an SQL injection vulnerability in the Oracle Database Server's DBMS_METADATA package. This issue is caused by insufficient sanitization of user-supplied data. An attacker with limited privileges on the database server may exploit this vulnerability to obtain database administrative (DBA) privileges. In an attack exploiting this vulnerability, arbitrary SQL statements can be executed with the privileges of SYS database user. The behaviour of the target system will be dependent on the injected statements. |
This protection will detect and block attempts to exploit this vulnerability
In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.
This protection's log will contain the following information:
Attack Name: Oracle Protection Violation.
Attack Information: Oracle Database Server DBMS_METADATA Package SQL Injection