Vulnerability in Oracle Timesten In-Memory Database
CVE-2008-5440
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.
EPSS: 0.119 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Oracle Timesten_in-memory_database — versions 7.0.5.0.0
- N/a — versions n/a
References
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (mailing-list, x_refsource_BUGTRAQ)
- secalert_us@oracle.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (mailing-list, x_refsource_BUGTRAQ)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (x_refsource_MISC)