PT-2008-1975 · Oracle · Oracle Database

Published 2008-01-17 · Updated 2012-10-23 · CVE-2008-0342

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database versions 9.2.0.8, 10.1.0.5, and 10.2.0.3

Description The issue concerns an unspecified vulnerability in the Upgrade/Downgrade component. It has unknown impact and remote attack vectors.

Recommendations For Oracle Database version 9.2.0.8, update to a version that contains a fix for this issue. For Oracle Database version 10.1.0.5, update to a version that contains a fix for this issue. For Oracle Database version 10.2.0.3, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2008-0342

Affected Products

Oracle Database

References · 11

• http://secunia.com/advisories/28518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0342 · Security Note
• http://us-cert.gov/cas/techalerts/TA08-017A.html · Patch
• http://marc.info/?l=bugtraq&m=120058413923005&w=2 · Vendor Advisory
• http://secunia.com/advisories/28556 · Note
• http://vupen.com/english/advisories/2008/0180 · Note
• http://vupen.com/english/advisories/2008/0150 · Note
• http://securityfocus.com/bid/27229 · Note
• http://oracle.com/technetwork/topics/security/cpujan2008-086860.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0342 · Note
• http://securitytracker.com/id?1019218 · Note