Unscored severity · published Jul 15, 2008
CVE-2008-2607
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AQ
Advanced Queuing Component · Oracle
All versions, or not specified · source: NVD
D9
Database 9i · Oracle
9.2.0.8; 9.2.0.8 · source: NVD
DS
Database Server · Oracle
10.1.0.5; 10.2.0.4; 11.1.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2607
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2607
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726
Vendor Advisory
http://secunia.com/advisories/31087
Vendor Advisory
http://secunia.com/advisories/31113
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
www.securitytracker.com
http://www.securitytracker.com/id?1020499
