virus logo Intrusion Prevention

Oracle.SYS.LT.ROLLBACKWORKSPACE.SQL.Injection

description-logoDescription

This indicates an exploit attempt against the sql injection vulnerability in Oracle database system.
The vulnerability lies in the SYS.LT.ROLLBACKWORKSPACE procedure of Oracle database. A specially crafted parameters could allow attacker to execute SQL statements with SYS or WMSYS privileges.

affected-products-logoAffected Products

Oracle 10g R1

Impact logoImpact

Privilege Escalation: Remote attackers can leverage their privilege on the vulnerable systems.

recomended-action-logoRecommended Actions

Apply the patch from vendor's website.
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2009.html

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 17433
Created May 22, 2009
Updated Mar 20, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2009-0978
Exploit Prediction Score 81.81%
Default Action drop
Active
Affected OS All
Affected App Oracle