medium5.5Public exploit code
CVE-2008-3983
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticate…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle 10g - SYS.LT.MERGEWORKSPACE SQL Injection2009-01-06 · local · multiple · Verified
Impact
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3984.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database 10g | Versions 10.1.0.5, 10.2.0.3 |
| Oracle | Database 11i | Version 11.1.0.6 |
| Oracle | Database 9i | Versions 9.2.0.8, 9.2.0.8dv |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32291
- http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
- http://www.securitytracker.com/id?1021050
- http://www.vupen.com/english/advisories/2008/2825
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45886
- http://secunia.com/advisories/32291
- http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
- http://www.securitytracker.com/id?1021050
- http://www.vupen.com/english/advisories/2008/2825
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45886