CVE-2009-1019

Oracle Database Server <=11.1.0.7 - Remote Code Execution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-1019. PoCs published by Dennis Yurichev.

AI-analyzed exploit summary This PoC exploits CVE-2009-1019, a remote vulnerability in Oracle Database's Network Authentication. It sends crafted TNS commands over the Oracle Net protocol to trigger the vulnerability, potentially leading to unauthorized access or denial of service.

Description

Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dennis Yurichev · c++remotemultiple
https://www.exploit-db.com/exploits/33081

This PoC exploits CVE-2009-1019, a remote vulnerability in Oracle Database's Network Authentication. It sends crafted TNS commands over the Oracle Net protocol to trigger the vulnerability, potentially leading to unauthorized access or denial of service.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Moderate
Reliability
Reliable
Target: Oracle Database (9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7)
No auth needed
Prerequisites: Network access to the target Oracle Database server on port 1521
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/55884
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35776
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51748
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1900
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35680
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022560

Scores

EPSS 0.0950
EPSS Percentile 93.0%

Details

Status published
Products (5)
oracle/database_server 9.2.0.8
oracle/database_server 9.2.0.8dv
oracle/database_server 10.1.0.4
oracle/database_server 10.1.0.5
oracle/database_server 11.1.0.7
Published Jul 14, 2009
Tracked Since Feb 18, 2026