CVE-2008-1817: SQL Injection

Published Apr 16, 2008

Updated

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDOIDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB07 is SQL injection.

Affected Software

5 affected components

Oracle Database 9i=9.2.0.8dv

Oracle Database Server=9.0.1.5

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=11.1.0.6

Event History

Apr 16, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1817?

The severity of CVE-2008-1817 is currently unknown due to unspecified vulnerabilities and their impacts.

How do I fix CVE-2008-1817?

Fixing CVE-2008-1817 may involve applying patches or updates provided by Oracle for the affected database versions.

What versions of Oracle Database are affected by CVE-2008-1817?

CVE-2008-1817 affects Oracle Database versions 9.0.1.5, 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6.

Can CVE-2008-1817 be exploited remotely?

Yes, CVE-2008-1817 has remote attack vectors that could potentially be exploited by attackers.

What components of Oracle Database are impacted by CVE-2008-1817?

CVE-2008-1817 impacts multiple components including SDO_IDX in the Spatial component and the Core RDBMS.