CVE

Id
32709  
CVE No.
CVE-2008-2592  
Status
Candidate  
Description
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_DEFER_SYS. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a SQL injection vulnerability in the DELETE_TRAN procedure.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
353899 32709 CVE-2008-2592 BUGTRAQ:20080804 Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN)  View
353900 32709 CVE-2008-2592 URL:http://www.securityfocus.com/archive/1/archive/1/495094/100/0/threaded  View
353901 32709 CVE-2008-2592 BUGTRAQ:20080811 Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN)  View
353902 32709 CVE-2008-2592 URL:http://www.securityfocus.com/archive/1/archive/1/495336/100/0/threaded  View
353903 32709 CVE-2008-2592 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html  View
353904 32709 CVE-2008-2592 HP:HPSBMA02133  View
353905 32709 CVE-2008-2592 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353906 32709 CVE-2008-2592 HP:SSRT061201  View
353907 32709 CVE-2008-2592 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353908 32709 CVE-2008-2592 VUPEN:ADV-2008-2115  View
353909 32709 CVE-2008-2592 URL:http://www.vupen.com/english/advisories/2008/2115  View
353910 32709 CVE-2008-2592 VUPEN:ADV-2008-2109  View
353911 32709 CVE-2008-2592 URL:http://www.vupen.com/english/advisories/2008/2109/references  View
353912 32709 CVE-2008-2592 SECTRACK:1020499  View
353913 32709 CVE-2008-2592 URL:http://www.securitytracker.com/id?1020499  View
353914 32709 CVE-2008-2592 SECUNIA:31113  View
353915 32709 CVE-2008-2592 URL:http://secunia.com/advisories/31113  View
353916 32709 CVE-2008-2592 SECUNIA:31087  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49203 JVNDB-2008-004513 Oracle E-Business Suite の Mobile Application Server コンポーネントにおける脆弱性 Oracle E-Business Suite の Mobile Application Server コンポーネントには、不特定の影響を受ける脆弱性が存在します。 CVE-2008-2596 32709 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004513.html  View