CVE-2008-2613: Medium severity oracle scheduler vulnerability

Published Jul 15, 2008

Updated

Unspecified vulnerability in the Database Scheduler component in Oracle Database 10.2.0.4 and 11.1.0.6 has unknown impact and local attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is an untrusted search path issue that allows local users to gain privileges via a malicious (1) libclntsh.so or (2) libnnz10.so library.

Affected Software

3 affected components

Oracle Database Scheduler

Oracle Database Server=10.2.0.4

Oracle Database Server=11.1.0.6

Event History

Jul 15, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2613?

The severity of CVE-2008-2613 is currently unspecified, as the impact and attack vectors remain unknown.

How do I fix CVE-2008-2613?

To address CVE-2008-2613, it is recommended to apply the latest patches provided by Oracle for affected versions.

Which Oracle Database versions are affected by CVE-2008-2613?

CVE-2008-2613 affects Oracle Database versions 10.2.0.4 and 11.1.0.6.

What components of Oracle are impacted by CVE-2008-2613?

CVE-2008-2613 impacts the Database Scheduler component within Oracle Database.

Is there a workaround for CVE-2008-2613?

Currently, there are no documented workarounds for CVE-2008-2613 apart from updating to a non-vulnerable version.