Unscored severity · published Jan 14, 2009
CVE-2008-5440
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via…
–
CVSS
11.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Timesten In-memory Database · Oracle
7.0.5.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5440
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5440
joxeankoret.com
http://joxeankoret.com/blog/?p=41
Vendor Advisory
http://secunia.com/advisories/33525
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/500078/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/500080/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/33177
More from Timesten In-memory Database
9.9
CVE-2026-60402
Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator)
9.8
CVE-2019-11835
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments
9.8
CVE-2019-11834
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal
9.8
CVE-2018-11058
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain…
7.5
CVE-2021-41772
Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field