CVE-2008-3996: Medium severity oracle database vulnerability

Published Oct 14, 2008

Updated

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSCDCIPUBLISH.

Affected Software

3 affected components

Oracle Database 10g=10.1.0.5

Oracle Database 10g=10.2.0.4

Oracle Database 11i=11.1.0.6

Event History

Oct 14, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3996?

CVE-2008-3996 has been classified with moderate severity due to its potential impact on confidentiality and integrity for affected systems.

How do I fix CVE-2008-3996?

To fix CVE-2008-3996, apply the latest patch or update provided by Oracle for the affected database version.

Which versions of Oracle Database are affected by CVE-2008-3996?

CVE-2008-3996 affects Oracle Database versions 10.1.0.5, 10.2.0.4, and 11.1.0.6.

Who can exploit CVE-2008-3996?

CVE-2008-3996 can be exploited by remote authenticated users who have access to the Change Data Capture component.

What component is vulnerable in CVE-2008-3996?

The vulnerability in CVE-2008-3996 is found in the Change Data Capture component related to SYS.DBMS_CDC_IPUBLISH.