CVE:CVE-2004-1339
CNNVD:CNNVD-200412-104
Oracle 9i和10g中的(1) MDSYS.SDO_GEOM_TRIG_INS1和(2) MDSYS.SDO_LRS_TRIG_INS存在默认SQL注入漏洞。远程攻击者可以借助
new .table_name或new.column_name参数执行任意SQL命令。
solution:Upgrade oracle database_server to a higher version than 10.2.1:r2,and avoid the version 10.2.1:r2; Upgrade oracle oracle9i to a higher version than 9.0,9.0.1,9.0.1.2,9.0.1.3,9.0.1.4,9.0.2,9.0.2.0.0,9.0.2.0.1,9.0.2.1,9.0.2.2,9.0.2.3,9.2.0.1,9.2.0.2,and avoid the version 9.0,9.0.1,9.0.1.2,9.0.1.3,9.0.1.4,9.0.2,9.0.2.0.0,9.0.2.0.1,9.0.2.1,9.0.2.2,9.0.2.3,9.2.0.1,9.2.0.2