medium
6.5
CWE
89
Advisory Published
Updated

CVE-2008-1813: SQL Injection

First published: Wed Apr 16 2008(Updated: )

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ in the Advanced Queuing component, aka DB01; (2) Core RDBMS, aka DB03; (3) SDO_GEOM in Oracle Spatial, aka DB06; (4) Export, aka DB12; and (5) DBMS_STATS in Query Optimizer, aka DB13. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB06 is SQL injection, and DB13 occurs when the OUTLN account is reset to use a hard-coded password.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Oracle Database=9.0.1.5
Oracle Database=9.2.0.8
Oracle Database=9.2.0.8dv
Oracle Database=9.0.1.5
Oracle Database=10.1.0.5
Oracle Database=10.2.0.3

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2008-1813?

    The severity of CVE-2008-1813 is classified as high due to its potential for remote unauthenticated access.

  • How do I fix CVE-2008-1813?

    To fix CVE-2008-1813, apply the latest security patches provided by Oracle for the affected database versions.

  • What versions of Oracle Database are affected by CVE-2008-1813?

    CVE-2008-1813 affects Oracle Database versions 9.0.1.5, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3.

  • Can CVE-2008-1813 be exploited remotely?

    Yes, CVE-2008-1813 can be exploited through remote unauthenticated attack vectors.

  • What components are related to CVE-2008-1813?

    CVE-2008-1813 is related to vulnerabilities in the Advanced Queuing component and Core RDBMS of Oracle Database.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203