Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2009-1985

Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Published: Oct 22, 2009
Updated: Nov 9, 2025
CVE: CVE-2009-1985
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
oracle / database_server	10.2.0.4	10.2.0.4.x
oracle / database_server	9.2.0.8	9.2.0.8.x
oracle / database_server	9.2.0.8dv	9.2.0.8dv.x
oracle / database_server	10.1.0.5	10.1.0.5.x

http://osvdb.org/59111
http://secunia.com/advisories/37027
http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html
http://www.securityfocus.com/bid/36745
http://www.securitytracker.com/id?1023057
http://www.us-cert.gov/cas/techalerts/TA09-294A.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo