CVE

Id
32724  
CVE No.
CVE-2008-2607  
Status
Candidate  
Description
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354121 32724 CVE-2008-2607 IDEFENSE:20080715 Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability  View
354122 32724 CVE-2008-2607 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726  View
354123 32724 CVE-2008-2607 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html  View
354124 32724 CVE-2008-2607 HP:HPSBMA02133  View
354125 32724 CVE-2008-2607 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
354126 32724 CVE-2008-2607 HP:SSRT061201  View
354127 32724 CVE-2008-2607 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143  View
354128 32724 CVE-2008-2607 VUPEN:ADV-2008-2115  View
354129 32724 CVE-2008-2607 URL:http://www.vupen.com/english/advisories/2008/2115  View
354130 32724 CVE-2008-2607 VUPEN:ADV-2008-2109  View
354131 32724 CVE-2008-2607 URL:http://www.vupen.com/english/advisories/2008/2109/references  View
354132 32724 CVE-2008-2607 SECTRACK:1020499  View
354133 32724 CVE-2008-2607 URL:http://www.securitytracker.com/id?1020499  View
354134 32724 CVE-2008-2607 SECUNIA:31113  View
354135 32724 CVE-2008-2607 URL:http://secunia.com/advisories/31113  View
354136 32724 CVE-2008-2607 SECUNIA:31087  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46240 JVNDB-2008-001550 Oracle Database の Core RDBMS コンポーネントにおける脆弱性 Oracle Database の Core RDBMS コンポーネントには、詳細不明な脆弱性が存在します。 CVE-2008-2611 32724 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001550.html  View