5.5

CVE-2008-1816

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit component, aka DB14.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB05 is SQL injection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Database Server Version10.1.0.5
Oracle ≫ Database Server Version10.2.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.85% 0.763
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29829
Vendor Advisory
http://secunia.com/advisories/29874
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
http://www.securityfocus.com/archive/1/491024/100/0/threaded
http://www.securitytracker.com/id?1019855
http://www.vupen.com/english/advisories/2008/1233/references
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1267/references
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_util.html
http://www.securityfocus.com/archive/1/490918/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/41999
https://exchange.xforce.ibmcloud.com/vulnerabilities/42000