exploitDog

CVE-2008-2595

Опубликовано: 15 июл. 2008

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:database_10g:10.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_10g:10.1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_9i:9.0.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.16477

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-rwwf-h3vf-px76

github

почти 4 года назад

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.

EPSS

Процентиль: 95%

0.16477

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo