CVE-2008-2595: Null Pointer Dereference

Published Jul 15, 2008

Updated

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.

Affected Software

3 affected components

Oracle Database 10g=10.1.2.3

Oracle Database 10g=10.1.4.2

Oracle Database 9i=9.0.4.3

Event History

Jul 15, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2595?

The severity of CVE-2008-2595 is currently unknown as Oracle has not provided detailed information on its impact.

How do I fix CVE-2008-2595?

To fix CVE-2008-2595, users should apply the necessary patches or updates provided by Oracle for the affected versions.

Which software versions are affected by CVE-2008-2595?

CVE-2008-2595 affects Oracle Database versions 9.0.4.3, 10.1.2.3, and 10.1.4.2.

Can CVE-2008-2595 be exploited remotely?

Yes, CVE-2008-2595 has remote attack vectors, potentially allowing unauthorized access.

Is there a known exploit for CVE-2008-2595?

As of now, there is no specific public information on known exploits for CVE-2008-2595.