CVE-2008-2625

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect…

published October 14, 2008

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02066 · 81.2th percentile
Published
2008-10-14T21:00Z
EPSS history
Timeline
  • 14 OCT 21:00Z
    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect…
    cvelistv5