NVD

Id
5213  
Name
CVE-2008-5440  
Description
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-01-13  
Modified Date
2012-10-22  
Seq
2008-5440  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
32771 5213 CVE-2008-5440 http://joxeankoret.com/blog/?p=41  View
32772 5213 CVE-2008-5440 http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html  View
32773 5213 CVE-2008-5440 20090114 ZDI-09-004: Oracle TimesTen evtdump Remote Format String Vulnerability  View
32774 5213 CVE-2008-5440 20090114 Oracle TimesTen Remote Format String  View
32775 5213 CVE-2008-5440 33177  View
32776 5213 CVE-2008-5440 ADV-2009-0115  View
32777 5213 CVE-2008-5440 http://www.zerodayinitiative.com/advisories/ZDI-09-004  View
32778 5213 CVE-2008-5440 http://www.zerodayinitiative.com/advisories/ZDI-09-004/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40662 JVNDB-2009-001668 Oracle Database の TimesTen Data Server コンポーネントにおける機密性、完全性、可用性に影響を及ばされる脆弱性 Oracle Database の TimesTen Data Server コンポーネントには、機密性、完全性、可用性に影響を及ぼされる脆弱性が存在します。 CVE-2008-5440 35553 CVE-2008-5440 5213 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001668.html 2009-01-14 2009-07-08 View