CVE-2008-5440

Publicada el 14 ene 2009 · Actualizada el 07 ago 2024

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 12%

probabilidad de explotación

12%top 4% de las CVE

explotación observada

noninguna fuente lo reporta

Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.

Productos afectados

n/a · n/a

Referencias

http://joxeankoret.com/blog/?p=41 http://secunia.com/advisories/33525 http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html http://www.securityfocus.com/archive/1/500078/100/0/threaded http://www.securityfocus.com/archive/1/500080/100/0/threaded http://www.securityfocus.com/bid/33177 http://www.vupen.com/english/advisories/2009/0115 http://www.zerodayinitiative.com/advisories/ZDI-09-004 http://www.zerodayinitiative.com/advisories/ZDI-09-004/