CVE-2008-1816: SQL Injection

Published Apr 16, 2008

Updated

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDOUTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit component, aka DB14. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB05 is SQL injection.

Affected Software

2 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.1.0.5

Event History

Apr 16, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1816?

The severity of CVE-2008-1816 is currently unknown, as the specific impacts and attack vectors have not been disclosed.

What products are affected by CVE-2008-1816?

CVE-2008-1816 affects Oracle Database versions 10.1.0.5 and 10.2.0.3.

How do I fix CVE-2008-1816?

To fix CVE-2008-1816, ensure your Oracle Database is updated to a newer, patched version as recommended by Oracle.

Can CVE-2008-1816 be exploited remotely?

Yes, CVE-2008-1816 can be exploited through remote authenticated attack vectors.

What components are vulnerable in CVE-2008-1816?

CVE-2008-1816 involves vulnerabilities related to the SDO_UTIL in the Oracle Spatial component and fine-grained auditing in the Audit component.