Info

Disclosure

Apr 16, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Disclosure: Vendor Verified, Vendor Verified, Coordinated Disclosure
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-1817 (see also: NVD)
Secunia Advisory ID: 29829
Related OSVDB ID: 44476 44482 44485 44496 44500 44502 44503 44504 44505 44506 44507 44508 44509 44510 44512 44513 44514 44515 44516 44517
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-04/0203.html
News Article: http://www.eweek.com/c/a/Database/Oracle-Issues-41-Security-Fixes-in-Latest-CPU/
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2008.html
Other Advisory URL: http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_idx.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/44511