CVE-2008-2608

Published: Jul 15, 2008Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILE_INT.

Affected (3)

Products: Oracle: Data Pump Component, Database Server

Oracle

2 products

Data Pump Component

Database Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Data Pump Component	All versions
Oracle Database Server	Version 10.1.0.5
Oracle Database Server	Version 10.2.0.3

References (14)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143

Source: cve@mitre.org

http://secunia.com/advisories/31087

Source: cve@mitre.org

http://secunia.com/advisories/31113

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html

Source: cve@mitre.org

http://www.securitytracker.com/id?1020499

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2109/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2115

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143