CVE

Id
32706  
CVE No.
CVE-2008-2589  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
353853 32706 CVE-2008-2589 BUGTRAQ:20080715 Oracle Application Server PLSQL injection flaw  View
353854 32706 CVE-2008-2589 URL:http://www.securityfocus.com/archive/1/archive/1/494410/100/0/threaded  View
353855 32706 CVE-2008-2589 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html  View
353856 32706 CVE-2008-2589 HP:HPSBMA02133  View
353857 32706 CVE-2008-2589 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353858 32706 CVE-2008-2589 HP:SSRT061201  View
353859 32706 CVE-2008-2589 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353860 32706 CVE-2008-2589 VUPEN:ADV-2008-2115  View
353861 32706 CVE-2008-2589 URL:http://www.vupen.com/english/advisories/2008/2115  View
353862 32706 CVE-2008-2589 VUPEN:ADV-2008-2109  View
353863 32706 CVE-2008-2589 URL:http://www.vupen.com/english/advisories/2008/2109/references  View
353864 32706 CVE-2008-2589 SECTRACK:1020494  View
353865 32706 CVE-2008-2589 URL:http://www.securitytracker.com/id?1020494  View
353866 32706 CVE-2008-2589 SECUNIA:31113  View
353867 32706 CVE-2008-2589 URL:http://secunia.com/advisories/31113  View
353868 32706 CVE-2008-2589 SECUNIA:31087  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46247 JVNDB-2008-001557 Oracle Application Server の Oracle Portal コンポーネントにおける脆弱性 Oracle Application Server の Oracle Portal コンポーネントに、詳細不明の脆弱性が存在します。 CVE-2008-2593 32706 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001557.html  View