CVE-2008-1820
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11.
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
- EPSS
- 2.08% probability · 81th percentile
- CISA KEV
- Not listed
- Affected
- oracle/database 10g · oracle/database 11g · oracle/database 9i
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29829Vendor Advisory
- http://secunia.com/advisories/29874Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
- http://www.securityfocus.com/archive/1/491024/100/0/threaded
- http://www.securityfocus.com/archive/1/491524/30/390/threaded
- http://www.securitytracker.com/id?1019855
- http://www.vupen.com/english/advisories/2008/1233/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1267/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42036
- http://secunia.com/advisories/29829Vendor Advisory
- http://secunia.com/advisories/29874Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
- http://www.securityfocus.com/archive/1/491024/100/0/threaded
- http://www.securityfocus.com/archive/1/491524/30/390/threaded
- http://www.securitytracker.com/id?1019855
- http://www.vupen.com/english/advisories/2008/1233/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1267/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42036
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.