Oracle_Database_Server_DBMS_CDC_PUBLISH_Multiple_Procedure_SQL_Injection_attack

This strike exploits an SQL injection vulnerability in Oracle Database Server. The vulnerability is due to input validation errors in the DROP_CHANGE_SOURCE and ALTER_CHANGE_SOURCE procedures of the DBMS_CDC_PUBLISH package. Remote authenticated attackers with EXECUTE permission on the SYS.DBMS_CDC_PUBLISH package can exploit this vulnerability by sending a specially crafted parameter to the affected procedures. Successful exploitation would result in disclosure of information, and modification or manipulation of the data in the underlying database.