9

CVE-2008-1817

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10.  NOTE: the previous information was obtained from the Oracle CPU.  Oracle has not commented on reliable researcher claims that DB07 is SQL injection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Database 9i Version 9.2.0.8dv
Oracle ≫ Database Server Version 9.0.1.5 Edition fips
Oracle ≫ Database Server Version 10.1.0.5
Oracle ≫ Database Server Version 10.2.0.3
Oracle ≫ Database Server Version 11.1.0.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.743
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29829
Vendor Advisory
http://secunia.com/advisories/29874
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
http://www.securityfocus.com/archive/1/491024/100/0/threaded
http://www.securitytracker.com/id?1019855
http://www.vupen.com/english/advisories/2008/1233/references
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1267/references
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_idx.html
http://www.securityfocus.com/archive/1/490920/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/42001
https://exchange.xforce.ibmcloud.com/vulnerabilities/42002