peter bassill · operator
$ cve CVE-2008-2595 JSON

CVE-2008-2595 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 11.3% (pctl 96)

Patch early

A public exploit exists.

Description

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS11.34% — more likely to be exploited than 96% of all CVEs
On CISA KEVno
Public exploityes
Published2008-07-15
Last modified2026-06-16

Affected (2)

VendorProduct
oracledatabase 10g
oracledatabase 9i

Public exploits

SourceTitleDate
exploit-dbOracle Internet Directory 10.1.4 - Remote Denial of Service2008-07-19

References

→ the Explorer  ·  watch your stack  ·  NVD