CVE

Id
31937  
CVE No.
CVE-2008-1820  
Status
Candidate  
Description
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.  
Phase
Assigned (20080415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
344403 31937 CVE-2008-1820 BUGTRAQ:20080501 Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)  View
344404 31937 CVE-2008-1820 URL:http://www.securityfocus.com/archive/1/491524/30/390/threaded  View
344405 31937 CVE-2008-1820 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html  View
344406 31937 CVE-2008-1820 HP:HPSBMA02133  View
344407 31937 CVE-2008-1820 URL:http://www.securityfocus.com/archive/1/archive/1/491024/100/0/threaded  View
344408 31937 CVE-2008-1820 HP:SSRT061201  View
344409 31937 CVE-2008-1820 URL:http://www.securityfocus.com/archive/1/archive/1/491024/100/0/threaded  View
344410 31937 CVE-2008-1820 VUPEN:ADV-2008-1233  View
344411 31937 CVE-2008-1820 URL:http://www.vupen.com/english/advisories/2008/1233/references  View
344412 31937 CVE-2008-1820 VUPEN:ADV-2008-1267  View
344413 31937 CVE-2008-1820 URL:http://www.vupen.com/english/advisories/2008/1267/references  View
344414 31937 CVE-2008-1820 SECTRACK:1019855  View
344415 31937 CVE-2008-1820 URL:http://www.securitytracker.com/id?1019855  View
344416 31937 CVE-2008-1820 SECUNIA:29874  View
344417 31937 CVE-2008-1820 URL:http://secunia.com/advisories/29874  View
344418 31937 CVE-2008-1820 SECUNIA:29829  View
344419 31937 CVE-2008-1820 URL:http://secunia.com/advisories/29829  View
344420 31937 CVE-2008-1820 XF:oracle-cpu-april-2008(41858)  View
344421 31937 CVE-2008-1820 URL:http://xforce.iss.net/xforce/xfdb/41858  View
344422 31937 CVE-2008-1820 XF:oracle-database-datapump-dos(42036)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45999 JVNDB-2008-001309 Oracle Application Server の Oracle Dynamic Monitoring Service コンポーネントにおける脆弱性 Oracle Application Server の Oracle Dynamic Monitoring Service コンポーネントに関連する脆弱性が存在します。 CVE-2008-1824 31937 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001309.html  View