CVE-2008-2602: Medium severity oracle database vulnerability
Published Jul 15, 2008
·Updated
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMPFULLDATABASE role.
Affected Software
4 affected components
Oracle Database Server=10.2.0.4
Oracle Database Server=11.1.0.6
Oracle Data Pump component
Oracle Database Server=10.1.0.5
Event History
Jul 15, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2602?
CVE-2008-2602 has an unspecified severity level due to its unknown impact and attack vectors.
2
How do I fix CVE-2008-2602?
To remediate CVE-2008-2602, apply the latest patches and updates provided by Oracle for affected database versions.
3
Which versions of Oracle Database are affected by CVE-2008-2602?
CVE-2008-2602 affects Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6.
4
What components of Oracle are involved in CVE-2008-2602?
CVE-2008-2602 is related to the Data Pump component within Oracle Database.
5
What is the nature of the attack associated with CVE-2008-2602?
CVE-2008-2602 may be exploited by remote authenticated attackers leveraging the IMP_FULL_DATABASE role.