1. CVE-Search
  2. CVE-2008-7237
ID CVE-2008-7237
Summary Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality via unknown vectors, aka AS06.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 28-07-2021 - 18:39)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
refmap via4
bid 27229
cert TA08-017A
confirm http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
hp
  • HPSBMA02133
  • SSRT061201
osvdb 40298
sectrack 1019218
secunia
  • 28518
  • 28556
vupen
  • ADV-2008-0150
  • ADV-2008-0180
saint via4
bid 27229
description Oracle XDB component PITRIG_TRUNCATE buffer overflow
id database_oracle_version
osvdb 40300
title oracle_xdb_pitrig_truncate
type remote
Last major update 28-07-2021 - 18:39
Published 14-09-2009 - 14:30
Last modified 28-07-2021 - 18:39
Back to Top