Oracle Database CTXSYS.CONTEXT Index Privilege Escalation Vulnerability

SA50143

CVE-2012-3132

08 Aug 2012

13 Aug 2012

Less Critical

Vendor Patch

Oracle Database 10.x
Oracle Database 11.x

From local network

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

David Litchfield has reported a vulnerability in Oracle Database, which can be exploited by malicious users to gain escalated privileges.

The vulnerability is caused due to an unspecified error related to the CTXSYS.CONTEXT index. No further information is currently available.

Successful exploitation allows user to gain SYSDBA privileges, but requires CREATE TABLE and CREATE PROCEDURE privileges and EXECUTE privileges on DBMS_STATS.

The vulnerability is reported in versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3. Other versions may also be affected.

Update to a fixed version (please see the vendor's advisory for details).
http://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1482694.1

Note: No actions are need for versions 11.2.0.2 and 11.2.0.3 if the July CPU has been applied.

David Litchfield

Oracle:
http://www.oracle.com/technetwork/topics/security/alert-cve-2012-3132-1721017.html

Team SHATTER:
http://www.teamshatter.com/topics/general/team-shatter-exclusive/ctxsys-context-privilege-escalation/