First published: Tue Jul 15 2008(Updated: )
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Database | =10.1.4.2 | |
Oracle Database | =10.1.2.3 | |
Oracle Database | =9.0.4.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2008-2595 is currently unknown as Oracle has not provided detailed information on its impact.
To fix CVE-2008-2595, users should apply the necessary patches or updates provided by Oracle for the affected versions.
CVE-2008-2595 affects Oracle Database versions 9.0.4.3, 10.1.2.3, and 10.1.4.2.
Yes, CVE-2008-2595 has remote attack vectors, potentially allowing unauthorized access.
As of now, there is no specific public information on known exploits for CVE-2008-2595.