CVE ID:	CVE-2007-0272
Description:	Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05.
Test IDs:	1.3.6.1.4.1.25623.1.0.802523
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0272 BugTraq ID: 22083 http://www.securityfocus.com/bid/22083 Bugtraq: 20070124 Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD (Google Search) http://www.securityfocus.com/archive/1/458038/100/0/threaded Bugtraq: 20070718 Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD (DB12) (Google Search) http://www.securityfocus.com/archive/1/474047/100/0/threaded Cert/CC Advisory: TA07-017A http://www.us-cert.gov/cas/techalerts/TA07-017A.html http://www.appsecinc.com/resources/alerts/oracle/2007-05.shtml http://osvdb.org/32911 http://securitytracker.com/id?1017522 http://secunia.com/advisories/23794 XForce ISS Database: oracle-cpu-jan2007(31541) https://exchange.xforce.ibmcloud.com/vulnerabilities/31541