| ID |
CVE-2008-3979
|
| Summary |
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 5.5 (as of 11-10-2018 - 20:50) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
SINGLE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:S/C:P/I:P/A:N
|
| refmap
via4
|
|
| saint
via4
|
| bid | 33177 | | description | Oracle WebLogic Server IIS Connector JSESSIONID buffer overflow | | title | weblogic_iis_connector_jsessionid | | type | remote |
| bid | 33177 | | description | Oracle Database OLAP component ODCITABLESTART buffer overflow | | id | database_oracle_version | | osvdb | 51347 | | title | oracle_olap_odcitablestart | | type | remote |
| bid | 33177 | | description | Oracle Secure Backup login.php ora_osb_lcookie command execution | | id | database_oracle_backupver | | osvdb | 51343 | | title | oracle_secure_backup_login_lcookie | | type | remote |
| bid | 33177 | | description | Oracle Secure Backup login.php rbtool command injection | | id | database_oracle_backupver | | osvdb | 51342 | | title | oracle_secure_backup_login_rbtool | | type | remote |
| bid | 33177 | | description | Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH buffer overflow | | id | database_oracle_backupndmpbo,database_oracle_backupver | | osvdb | 51340 | | title | oracle_secure_backup_ndmp_clientauth | | type | remote |
|
| Last major update |
11-10-2018 - 20:50 |
| Published |
14-01-2009 - 01:30 |
| Last modified |
11-10-2018 - 20:50 |
