CVE-2008-1821: Buffer Overflow

Published Apr 16, 2008

Updated

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote attack vectors related to SYS.DBMSAQJMSINTERNAL, aka DB15. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB15 is for multiple buffer overflows in the (1) AQ$REGISTER and (2) AQ$UNREGISTER procedures.

Affected Software

2 affected components

Oracle Database Server=9.0.1.5

Oracle Database Server=10.1.0.5

Event History

Apr 16, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1821?

The severity of CVE-2008-1821 is currently unspecified, resulting in potential unknown impacts.

How do I fix CVE-2008-1821?

To fix CVE-2008-1821, apply patches or updates provided by Oracle for affected versions of the database.

Which software versions are affected by CVE-2008-1821?

CVE-2008-1821 affects Oracle Database versions 9.0.1.5 FIPS+ and 10.1.0.5.

Is remote exploitation possible with CVE-2008-1821?

Yes, CVE-2008-1821 includes remote attack vectors that may be exploited.

What components are involved in CVE-2008-1821?

CVE-2008-1821 involves the Advanced Queuing component and specifically the SYS.DBMS_AQJMS_INTERNAL.