PT-2008-3347 · Oracle · Oracle Database

Publicado 2008-04-16 · Atualizado 2018-10-11 · CVE-2008-1815

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Database versions 10.1.0.5 through 11.1.0.6

Description The issue concerns an unspecified vulnerability in the Change Data Capture component, related to DBMS CDC UTILITY. It has unknown impact and remote authenticated attack vectors. There are claims that this issue may be related to SQL injection in LOCK CHANGE SET, although Oracle has not commented on this.

Recommendations For Oracle Database versions 10.1.0.5 through 11.1.0.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-1815

Produtos afetados

Oracle Database

Referências · 12

• http://securityfocus.com/archive/1/491522/30/390/threaded · Nota
• http://securityfocus.com/archive/1/491024/100/0/threaded · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 · Nota
• http://securitytracker.com/id?1019855 · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2008-082075.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1815 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41998 · Nota
• http://vupen.com/english/advisories/2008/1233/references · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1815 · Nota
• http://secunia.com/advisories/29829 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/1267/references · Aviso do Fabricante
• http://secunia.com/advisories/29874 · Aviso do Fabricante