First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2009-3413

LowCVSS 3.2/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3414.

Metrics

CVSS 2.0 3.2/10AV:N/AC:H/Au:M/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.htmlPatch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA10-012A.htmlThird Party Advisory, US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.htmlPatch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA10-012A.htmlThird Party Advisory, US Government Resource

Timeline

Published: Jan 13, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-34144.9Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authen CVE-2009-34159.0Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authentic CVE-2009-34164.3Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows CVE-2009-34177.5SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL CVE-2009-34186.5Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m p CVE-2009-34197.5SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands v CVE-2009-34204.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject ar CVE-2009-34219.8login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain adm CVE-2009-34226.8login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative CVE-2009-34236.8login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative a CVE-2009-34246.8Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute a CVE-2009-34255.0Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files