CVE-2008-3995: Medium severity oracle database vulnerability

Published Oct 14, 2008

Updated

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMSCDCPUBLISH.

Affected Software

3 affected components

Oracle Database 11i=11.1.0.6

Oracle Database 10g=10.1.0.5

Oracle Database 10g=10.2.0.4

Event History

Oct 14, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3995?

CVE-2008-3995 is considered a critical vulnerability affecting confidentiality and integrity in Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6.

How do I fix CVE-2008-3995?

To fix CVE-2008-3995, upgrade to a version of Oracle Database that is not affected by this vulnerability.

Who is affected by CVE-2008-3995?

CVE-2008-3995 affects remote authenticated users of Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6 using the Change Data Capture component.

What are the potential impacts of CVE-2008-3995?

The potential impacts of CVE-2008-3995 include unauthorized access to sensitive data and corruption of data integrity.

Is there a workaround for CVE-2008-3995?

There are no official workarounds for CVE-2008-3995; the recommended action is to apply the available patches or upgrade.