CVE-2008-3995

Oracle Database <11.1.0.6 - Info Disclosure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3995. PoCs published by MC, including Metasploit module auxiliary/sqli/oracle/dbms_cdc_publish.

AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in Oracle Database Server's SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE procedure. It creates a malicious function to execute arbitrary SQL commands, leveraging the vulnerability to grant elevated privileges.

Description

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.

Exploits (1)

metasploit WORKING POC

by MC · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/dbms_cdc_publish.rb

View Code ZIP pw:eip

This Metasploit module exploits a SQL injection vulnerability in Oracle Database Server's SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE procedure. It creates a malicious function to execute arbitrary SQL commands, leveraging the vulnerability to grant elevated privileges.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Oracle Database Server versions 10gR1, 10gR2, and 11gR1

Auth required

Prerequisites: Execute privilege on the vulnerable package · User with EXECUTE_CATALOG_ROLE

MITRE ATT&CK