CVE-2008-1820: Buffer Overflow

Published Apr 16, 2008

Updated

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILEINT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILEINT.GETFULLFILENAME procedure.

Affected Software

4 affected components

Oracle Database 10g=10.1.0.5

Oracle Database 10g=10.2.0.3

Oracle Database 11g=11.1.0.6

Oracle Database 9i=9.2.0.8

Event History

Apr 16, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1820?

The severity of CVE-2008-1820 has not been clearly defined by Oracle, but it is an unspecified vulnerability with potential impact.

How do I fix CVE-2008-1820?

To fix CVE-2008-1820, it is recommended to upgrade to the latest patched version of Oracle Database.

Which versions of Oracle Database are affected by CVE-2008-1820?

CVE-2008-1820 affects Oracle Database versions 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6.

What components are involved in the CVE-2008-1820 vulnerability?

CVE-2008-1820 involves a vulnerability in the Data Pump component related to KUPF$FILE_INT.

Are there any known exploits for CVE-2008-1820?

As of now, there is no public information on known exploits for CVE-2008-1820.