Vulnerability Details CVE-2008-0339
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.272
EPSS Ranking 96.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://secunia.com/advisories/28518
- http://secunia.com/advisories/28556
- http://securitytracker.com/id?1019218
- http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
- http://www.securityfocus.com/bid/27229
- http://www.us-cert.gov/cas/techalerts/TA08-017A.html
- http://www.vupen.com/english/advisories/2008/0150
- http://www.vupen.com/english/advisories/2008/0180
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://secunia.com/advisories/28518
- http://secunia.com/advisories/28556
- http://securitytracker.com/id?1019218
- http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
- http://www.securityfocus.com/bid/27229
- http://www.us-cert.gov/cas/techalerts/TA08-017A.html
- http://www.vupen.com/english/advisories/2008/0150
- http://www.vupen.com/english/advisories/2008/0180
Products affected by CVE-2008-0339
-
cpe:2.3:a:oracle:database_server:10.1.0.5
-
cpe:2.3:a:oracle:database_server:10.2.0.3
-
cpe:2.3:a:oracle:database_server:9.2.0.8dv