PT-2009-1220 · Oracle · Oracle Database

Published 2009-01-14 · Updated 2012-10-23 · CVE-2008-3974

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database versions 9.0.2.8 and 9.2.0.8DV

Description The issue affects the availability of the system and is related to SYS.OLAPIMPL T. It can be exploited by remote authenticated users.

Recommendations For Oracle Database version 9.0.2.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Oracle Database version 9.2.0.8DV, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-3974

Affected Products

Oracle Database

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3974 · Security Note
• http://vupen.com/english/advisories/2009/0115 · Note
• http://securityfocus.com/bid/33177 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3974 · Note
• http://osvdb.org/51347 · Note
• http://secunia.com/advisories/33525 · Note
• http://securitytracker.com/id?1021561 · Note
• http://oracle.com/technetwork/topics/security/cpujan2009-097901.html · Note