CVE		CVE-2009-0992
Status		UNKNOWN
Description		Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.
Severity		Medium
CVSS score		5,5
CVSS vector		(AV:N/AC:L/Au:S/C:P/I:P/A:N)
Phase		ASSIGNED (04.02.2011)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0992
References		BID : 34461
		BUGTRAQ : 20090416 SQL Injection in package DBMS_AQIN
		CERT : TA09-105A
		CONFIRM : http://www.oracle.com/technology/deploy/security/c...
		MISC : http://www.red-database-security.com/advisory/orac...
		SECTRACK : 1022052
		SECUNIA : 34693
SecurityVulns:		Oracle multiple security vulnerabilities