CVE-2007-5513

N/A Unknown
Published: October 17, 2007 Modified: April 23, 2026
View on NVD

Description

The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://marc.info/?l=bugtraq&m=119332677525918&w=2
Source: cve@mitre.org
http://secunia.com/advisories/27251
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/27409
Source: cve@mitre.org
http://securityreason.com/securityalert/3247
Source: cve@mitre.org
http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-oracle-xmldb-ftp-service/
Source: cve@mitre.org
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/482426/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/26107
Source: cve@mitre.org
http://www.securitytracker.com/id?1018823
Source: cve@mitre.org
http://www.us-cert.gov/cas/techalerts/TA07-290A.html
Source: cve@mitre.org
US Government Resource
http://www.vupen.com/english/advisories/2007/3524
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/3626
Source: cve@mitre.org
http://marc.info/?l=bugtraq&m=119332677525918&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/27251
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/27409
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/3247
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-oracle-xmldb-ftp-service/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/482426/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/26107
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1018823
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA07-290A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2007/3524
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/3626
Source: af854a3a-2127-422b-91ae-364da2661108

24 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.9%
85th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

oracle