PT-2008-3347 · Oracle · Oracle Database

Published 2008-04-16 · Updated 2018-10-11 · CVE-2008-1815

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Database versions 10.1.0.5 through 11.1.0.6

Description The issue concerns an unspecified vulnerability in the Change Data Capture component, related to DBMS CDC UTILITY. It has unknown impact and remote authenticated attack vectors. There are claims that this issue may be related to SQL injection in LOCK CHANGE SET, although Oracle has not commented on this.

Recommendations For Oracle Database versions 10.1.0.5 through 11.1.0.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-1815

Affected Products

Oracle Database

References · 12

• http://securityfocus.com/archive/1/491024/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1815 · Security Note
• http://vupen.com/english/advisories/2008/1233/references · Vendor Advisory
• http://secunia.com/advisories/29829 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1267/references · Vendor Advisory
• http://secunia.com/advisories/29874 · Vendor Advisory
• http://securityfocus.com/archive/1/491522/30/390/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 · Note
• http://securitytracker.com/id?1019855 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2008-082075.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41998 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1815 · Note