CVE-2008-2607

Related Files

iDEFENSE Security Advisory 2008-07-15.2

Posted Jul 16, 2008

Authored by iDefense Labs, Joxean Koret | Site idefense.com

iDefense Security Advisory 07.15.08 - Remote exploitation of a buffer overflow vulnerability in the DBMS_AQELM package in Oracle Corp.'s Oracle Database product allows attackers to execute arbitrary code with the privileges of the database user. This vulnerability exists due to improper input validation when handling a parameter passed to a procedure within the DBMS_AQELM package. Since the parameter is not properly validated, providing a long string can cause a buffer overflow to occur. This results in corruption of the database and could allow for the execution of arbitrary code as the database user. iDefense confirmed the existence of this vulnerability in Oracle Database version 10.2.0.3 and 11.1.0.6 with the October 2007 CPU applied. Previous versions may also be affected.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2008-2607

SHA-256 | 01ee6c67c85787f73c33c76013b6095d4c5cc691acac1583a9413464e178ede0

Download | Favorite | View