Vulnerability in Oracle Database 10g
CVE-2008-3984
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.
EPSS: 0.418 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Oracle Database_10g — versions 10.1.0.5, 10.2.0.3
- Oracle Database_11i — versions 11.1.0.6
- Oracle Database_9i — versions 9.2.0.8, 9.2.0.8dv
- N/a — versions n/a
Public proof-of-concept exploits
References
- secalert_us@oracle.com (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert_us@oracle.com (Permissions Required, x_refsource_SECUNIA, third-party-advisory)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (vdb-entry, Not Applicable, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2008-3984?
- CVE-2008-3984 is a vulnerability in Oracle Database 10g. Published 2008-10-14.
- Is CVE-2008-3984 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.