critical10.0Public exploit code
CVE-2008-0339
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Database 10 g - XML DB xdb.xdb_pitrig_pkg Package PITRIG_TRUNCATE Function Overflow2008-01-10 · remote · multiple · Verified
Impact
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | Versions 9.2.0.8dv, 10.1.0.5, 10.2.0.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://secunia.com/advisories/28518
- http://secunia.com/advisories/28556
- http://securitytracker.com/id?1019218
- http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
- http://www.securityfocus.com/bid/27229
- http://www.us-cert.gov/cas/techalerts/TA08-017A.html
- http://www.vupen.com/english/advisories/2008/0150
- http://www.vupen.com/english/advisories/2008/0180
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://secunia.com/advisories/28518
- http://secunia.com/advisories/28556
- http://securitytracker.com/id?1019218
- http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
- http://www.securityfocus.com/bid/27229
- http://www.us-cert.gov/cas/techalerts/TA08-017A.html
- http://www.vupen.com/english/advisories/2008/0150
- http://www.vupen.com/english/advisories/2008/0180