// For flags

CVE-2008-1820

 

Severity Score

4.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.

Una vulnerabilidad no especificada en el componente Data Pump en Oracle Database versiones 9.2.0.8, 10.1.0.5, 10.2.0.3 y 11.1.0.6, presenta un impacto desconocido y vectores de ataque remotos relacionados con KUPF$FILE_INT, también se conoce como DB11. NOTA: la información anterior fue obtenida de la CPU de abril de 2008. Oracle no ha comentado sobre las afirmaciones de investigadores confiables que DB11 es para un desbordamiento de búfer en el procedimiento SYS. KUPF$FILE_INT. GET_FULL_FILENAME.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-04-15 CVE Reserved
  • 2008-04-16 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-09-18 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Oracle
Search vendor "Oracle"
Database 10g
Search vendor "Oracle" for product "Database 10g"
10.1.0.5
Search vendor "Oracle" for product "Database 10g" and version "10.1.0.5"
-
Affected
Oracle
Search vendor "Oracle"
Database 10g
Search vendor "Oracle" for product "Database 10g"
10.2.0.3
Search vendor "Oracle" for product "Database 10g" and version "10.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Database 11g
Search vendor "Oracle" for product "Database 11g"
11.1.0.6
Search vendor "Oracle" for product "Database 11g" and version "11.1.0.6"
-
Affected
Oracle
Search vendor "Oracle"
Database 9i
Search vendor "Oracle" for product "Database 9i"
9.2.0.8
Search vendor "Oracle" for product "Database 9i" and version "9.2.0.8"
-
Affected