PT-2008-3344 · Oracle · Oracle Application Server+2

Published 2008-04-16 · Updated 2018-10-11 · CVE-2008-1812

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager for AS version 1.0.2.2 and Database 9.0.1.5 FIPS+ Oracle Application Server version 1.0.2.2 Oracle Database version 9.0.1.5 FIPS+

Description The issue concerns an unspecified vulnerability in the Oracle Enterprise Manager component, with unknown impact and local attack vectors.

Recommendations For Oracle Enterprise Manager for AS version 1.0.2.2 and Database 9.0.1.5 FIPS+, update to a version that addresses this issue. For Oracle Application Server version 1.0.2.2, update to a version that addresses this issue. For Oracle Database version 9.0.1.5 FIPS+, update to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-1812

Affected Products

Oracle Application Server

Oracle Database

Oracle Enterprise Manager

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2008-1812 · Security Note
• http://securityfocus.com/archive/1/491024/100/0/threaded · Vendor Advisory
• http://vupen.com/english/advisories/2008/1267/references · Note
• http://vupen.com/english/advisories/2008/1233/references · Note
• http://secunia.com/advisories/29829 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1812 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41989 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2008-082075.html · Note
• http://securitytracker.com/id?1019855 · Note
• http://secunia.com/advisories/29874 · Note