CVE-2008-1820
Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.
Published:Apr 16, 2008
Last Modified:Apr 23, 2026
EPS:Apr 16, 2008
EPSS Score:0.01249
CVSS Score:4
Affected Products
Vendor
Product
Action
Vendor
Oracle
Product
Database 10g
Oracle
Database 10g
Vendor
Oracle
Product
Database 11g
Oracle
Database 11g
Vendor
Oracle
Product
Database 9i
Oracle
Database 9i
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
