CVE-2008-2592

2008-07-1523:41:00

[email protected]

web.nvd.nist.gov

cve-2008-2592

unspecified vulnerability

oracle database

advanced replication

fips+

sql injection

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

JSON

Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a SQL injection vulnerability in the DELETE_TRAN procedure.

Affected configurations

NVD

Node

oracleadvanced_replication_component

oracledatabase_serverMatch9.2.0.8

oracledatabase_serverMatch10.1.0.5

oracleoracle_databaseMatch9.0.1.5fips\+

oracleoracle_databaseMatch9.2.0.8dv

oracleoracle_databaseMatch10.2.0.4

oracleoracle_databaseMatch11.1.0.6

CPENameOperatorVersion
oracle:advanced_replication_componentoracle advanced replication componenteq*
oracle:database_serveroracle database servereq9.2.0.8
oracle:database_serveroracle database servereq10.1.0.5
oracle:oracle_databaseoracle oracle databaseeq9.0.1.5
oracle:oracle_databaseoracle oracle databaseeq9.2.0.8
oracle:oracle_databaseoracle oracle databaseeq10.2.0.4
oracle:oracle_databaseoracle oracle databaseeq11.1.0.6

CPE	Name	Operator	Version
oracle:advanced_replication_component	oracle advanced replication component	eq	*
oracle:database_server	oracle database server	eq	9.2.0.8
oracle:database_server	oracle database server	eq	10.1.0.5
oracle:oracle_database	oracle oracle database	eq	9.0.1.5
oracle:oracle_database	oracle oracle database	eq	9.2.0.8
oracle:oracle_database	oracle oracle database	eq	10.2.0.4
oracle:oracle_database	oracle oracle database	eq	11.1.0.6