CVE

Id
35557  
CVE No.
CVE-2008-5440  
Status
Candidate  
Description
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.  
Phase
Assigned (20081211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
390800 35557 CVE-2008-5440 BUGTRAQ:20090114 Oracle TimesTen Remote Format String  View
390801 35557 CVE-2008-5440 URL:http://www.securityfocus.com/archive/1/archive/1/500080/100/0/threaded  View
390802 35557 CVE-2008-5440 BUGTRAQ:20090114 ZDI-09-004: Oracle TimesTen evtdump Remote Format String Vulnerability  View
390803 35557 CVE-2008-5440 URL:http://www.securityfocus.com/archive/1/archive/1/500078/100/0/threaded  View
390804 35557 CVE-2008-5440 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-004/  View
390805 35557 CVE-2008-5440 MISC:http://joxeankoret.com/blog/?p=41  View
390806 35557 CVE-2008-5440 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-004  View
390807 35557 CVE-2008-5440 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html  View
390808 35557 CVE-2008-5440 BID:33177  View
390809 35557 CVE-2008-5440 URL:http://www.securityfocus.com/bid/33177  View
390810 35557 CVE-2008-5440 VUPEN:ADV-2009-0115  View
390811 35557 CVE-2008-5440 URL:http://www.vupen.com/english/advisories/2009/0115  View
390812 35557 CVE-2008-5440 SECUNIA:33525  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40659 JVNDB-2009-001665 Oracle Secure Backup の Oracle Secure Backup コンポーネントにおける機密性、完全性、可用性に影響を及ぼされる脆弱性 Oracle Secure Backup の Oracle Secure Backup コンポーネントには、機密性、完全性、可用性に影響を及ぼされる脆弱性が存在します。 CVE-2008-5444 35557 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001665.html  View