CVE

Id
34096  
CVE No.
CVE-2008-3979  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger.  
Phase
Assigned (20080909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
372532 34096 CVE-2008-3979 BUGTRAQ:20090113 Trigger Abuse of MDSYS.SDO_TOPO_DROP_FTBL in Oracle 10g R1 and R2  View
372533 34096 CVE-2008-3979 URL:http://www.securityfocus.com/archive/1/archive/1/500061/100/0/threaded  View
372534 34096 CVE-2008-3979 MILW0RM:8074  View
372535 34096 CVE-2008-3979 URL:http://www.milw0rm.com/exploits/8074  View
372536 34096 CVE-2008-3979 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html  View
372537 34096 CVE-2008-3979 BID:33177  View
372538 34096 CVE-2008-3979 URL:http://www.securityfocus.com/bid/33177  View
372539 34096 CVE-2008-3979 VUPEN:ADV-2009-0115  View
372540 34096 CVE-2008-3979 URL:http://www.vupen.com/english/advisories/2009/0115  View
372541 34096 CVE-2008-3979 OSVDB:51354  View
372542 34096 CVE-2008-3979 URL:http://osvdb.org/51354  View
372543 34096 CVE-2008-3979 SECTRACK:1021561  View
372544 34096 CVE-2008-3979 URL:http://www.securitytracker.com/id?1021561  View
372545 34096 CVE-2008-3979 SECUNIA:33525  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46532 JVNDB-2008-001842 Oracle Database の Workspace Manager コンポーネントにおける SYS.LT および WMSYS.LT に関連する脆弱性 Oracle Database の Workspace Manager コンポーネントには SYS.LT および WMSYS.LT に関連する機密性、完全性に影響のある脆弱性が存在します。 CVE-2008-3983 34096 5.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001842.html  View