CVE

Id
32712  
CVE No.
CVE-2008-2595  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
353945 32712 CVE-2008-2595 IDEFENSE:20080715 Oracle Internet Directory Pre-Authentication LDAP DoS Vulnerability  View
353946 32712 CVE-2008-2595 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=725  View
353947 32712 CVE-2008-2595 MILW0RM:6101  View
353948 32712 CVE-2008-2595 URL:http://www.milw0rm.com/exploits/6101  View
353949 32712 CVE-2008-2595 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html  View
353950 32712 CVE-2008-2595 HP:HPSBMA02133  View
353951 32712 CVE-2008-2595 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353952 32712 CVE-2008-2595 HP:SSRT061201  View
353953 32712 CVE-2008-2595 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
353954 32712 CVE-2008-2595 VUPEN:ADV-2008-2115  View
353955 32712 CVE-2008-2595 URL:http://www.vupen.com/english/advisories/2008/2115  View
353956 32712 CVE-2008-2595 VUPEN:ADV-2008-2109  View
353957 32712 CVE-2008-2595 URL:http://www.vupen.com/english/advisories/2008/2109/references  View
353958 32712 CVE-2008-2595 SECTRACK:1020494  View
353959 32712 CVE-2008-2595 URL:http://www.securitytracker.com/id?1020494  View
353960 32712 CVE-2008-2595 SECUNIA:31113  View
353961 32712 CVE-2008-2595 URL:http://secunia.com/advisories/31113  View
353962 32712 CVE-2008-2595 SECUNIA:31087  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49206 JVNDB-2008-004516 Oracle Times Ten In-Memory Database の TimesTen Client/Server コンポーネントにおける脆弱性 Oracle Times Ten In-Memory Database の TimesTen Client/Server コンポーネントには、不特定の影響を受ける脆弱性が存在します。 CVE-2008-2599 32712 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004516.html  View