CVEs-PoC/2014/CVE-2014-4237.md

CVE-2014-4237

Description

Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Dec/23
• http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
• http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Github

• https://github.com/karlvbiron/OracleDB-PenTest-Engagement-via-ODAT
• https://github.com/karlvbiron/OracleDB-PenTest-Exercise-via-ODAT