Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle…

Description

Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager.

Scores

EPSS (exploitation in 30 days)

5.9% · top 6.8% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (7)

• http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• TA05-292A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• 20051020 Exploit Oracle DB27 - CPU Octobre (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• VU#449444 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• 15134 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• VU#210524 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• 17250 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2005-3438](https://trackcve.app/badge/CVE-2005-3438.svg)](https://trackcve.app/cve/CVE-2005-3438)

Record last updated 7 Aug 2024, 23:10 UTC.