CVE-2008-3990: Medium severity oracle database vulnerability

Published Oct 14, 2008

Updated

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2OLAPAWAWUTIL, a different vulnerability than CVE-2008-3991.

Affected Software

3 affected components

Oracle Database 10g=10.1.0.5

Oracle Database 9i=9.2.0.8

Oracle Database 9i=9.2.0.8dv

Event History

Oct 14, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3990?

CVE-2008-3990 is classified as a vulnerability that could potentially affect the availability of systems running Oracle OLAP.

How do I fix CVE-2008-3990?

To mitigate CVE-2008-3990, it is recommended to apply the latest patches provided by Oracle for the affected database versions.

Which versions of Oracle Database are affected by CVE-2008-3990?

CVE-2008-3990 affects Oracle Database versions 9.2.0.8, 9.2.0.8DV, and 10.1.0.5.

Can CVE-2008-3990 be exploited by unauthenticated users?

CVE-2008-3990 requires remote authenticated users to exploit the vulnerability.

Is CVE-2008-3990 related to any other vulnerabilities?

CVE-2008-3990 is different from CVE-2008-3991, although both are vulnerabilities in the Oracle OLAP component.