cvelistv5 - cve-2008-2584

CVE-2008-2584 (GCVE-0-2008-2584)

Vulnerability from cvelistv5

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2017-05-11T13:57:01",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2008-2584",
    "datePublished": "2017-05-11T14:01:00",
    "dateRejected": "2017-05-11T13:57:01",
    "dateReserved": "2008-06-09T00:00:00",
    "dateUpdated": "2017-05-11T13:57:01",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2008-2584\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2017-05-11T14:29:06.793\",\"lastModified\":\"2023-11-07T02:02:15.203\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none\"}],\"metrics\":{},\"references\":[]}}"
  }
}

gsd-2008-2584

Vulnerability from gsd

Modified

2023-12-13 01:23

Details

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.

Aliases

CVE-2008-2584

Aliases

CVE-2008-2584

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2008-2584",
    "description": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.",
    "id": "GSD-2008-2584"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2008-2584"
      ],
      "details": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none.",
      "id": "GSD-2008-2584",
      "modified": "2023-12-13T01:23:00.423135Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2008-2584",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none."
          }
        ]
      }
    }
  }
}

fkie_cve-2008-2584

Vulnerability from fkie_nvd

Published

2017-05-11 14:29

Modified

2023-11-07 02:02

Severity ?

Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none"
    }
  ],
  "id": "CVE-2008-2584",
  "lastModified": "2023-11-07T02:02:15.203",
  "metrics": {},
  "published": "2017-05-11T14:29:06.793",
  "references": [],
  "sourceIdentifier": "secalert_us@oracle.com",
  "vulnStatus": "Rejected"
}

CERTA-2008-AVI-367

Vulnerability from certfr_avis

De nombreuses vulnérabilités affectent les produits Oracle. L'exploitation de certaines d'entre elles permet à un utilisateur malveillant d'exécuter du code arbitraire à distance.

Description

Onze vulnérabilités affectent les bases de données Oracle Database. Deux sont exploitables localement. L'exploitation à distance des neuf autres demande une authentification préalable. Un utilisateur malveillant exploitant ces vulnérabilités peut exécuter du code arbitraire à distance ou accéder indûment aux données.

Trois vulnérabilités concernent Oracle TimesTen in-Memory Database. Leur exploitation permet à un utilisateur malveillant de provoquer un déni de service à distance, sans requérir d'authentification.

Neuf vulnérabilités affectent Oracle Application Server. Elle permettent à un utilisateur malveillant non authentifié de provoquer un déni de service à distance, de modifier ou de lire des données de manière illégitime.

Six vulnérabilités de E-businees Suite permettent de porter atteinte à la confidentialité ou à l'intégrité des données.

Deux vulnérabilités affectent Oracle Enterprise Manager. Leur exploitation permet à un utilisateur malveillant de porter atteinte à l'intégrité des données, à distance.

Sept vulnérabilités dans les produits Oracle PeopleSoft permettent à un utilisateur malveillant disposant d'une session valide de provoquer un déni de service à distance, de modifier ou de lire indûment des données.

Sept vulnérabilités sont présentes dans les serveurs Oracle WebLogic, dont quatre sont exploitables à distance sans authentification, une avec authentification et deux localement. Elles permettent à un utilisateur malveillant de provoquer un déni de service à distance, de modifier ou de lire des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Oracle	Weblogic	Oracle Application Server 10g ;
Oracle	Weblogic	Oracle Hyperion Performance Suite 8.x ;
Oracle	Weblogic	Oracle E-business Suite 12 et 11i ;
Oracle	Weblogic	Oracle PeopleSoft Entreprise CRM 8.x et 9.x ;
Oracle	Weblogic	Oracle Hyperion Bi Plus 9.x ;
Oracle	Weblogic	Oracle Weblogic Server 6, 7,8,9 et 10.x.
Oracle	Weblogic	Oracle Database 11g, 10g et 9i ;
Oracle	Weblogic	Oracle Enterprise Manager Grid Control 10g ;
Oracle	Weblogic	Oracle PeopleSoft Entreprise PeopleTools 8.x ;
Oracle	Weblogic	Oracle Enterprise Manager Database Control 11 et 10g ;
Oracle	Weblogic	Oracle TimesTen in-Memory Database ;

References

Title

Publication Time

Tags

Bulletin Oracle du 14 juillet 2008	None	vendor-advisory
Bulletin de mise à jour Oracle du 14 juillet 2008 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Application Server 10g ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Hyperion Performance Suite 8.x ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle E-business Suite 12 et 11i ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle PeopleSoft Entreprise CRM 8.x et 9.x ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Hyperion Bi Plus 9.x ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Weblogic Server 6, 7,8,9 et 10.x.",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 11g, 10g et 9i ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Enterprise Manager Grid Control 10g ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle PeopleSoft Entreprise PeopleTools 8.x ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Enterprise Manager Database Control 11 et 10g ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle TimesTen in-Memory Database ;",
      "product": {
        "name": "Weblogic",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nOnze vuln\u00e9rabilit\u00e9s affectent les bases de donn\u00e9es Oracle Database. Deux\nsont exploitables localement. L\u0027exploitation \u00e0 distance des neuf autres\ndemande une authentification pr\u00e9alable. Un utilisateur malveillant\nexploitant ces vuln\u00e9rabilit\u00e9s peut ex\u00e9cuter du code arbitraire \u00e0\ndistance ou acc\u00e9der ind\u00fbment aux donn\u00e9es.\n\nTrois vuln\u00e9rabilit\u00e9s concernent Oracle TimesTen in-Memory Database. Leur\nexploitation permet \u00e0 un utilisateur malveillant de provoquer un d\u00e9ni de\nservice \u00e0 distance, sans requ\u00e9rir d\u0027authentification.\n\nNeuf vuln\u00e9rabilit\u00e9s affectent Oracle Application Server. Elle permettent\n\u00e0 un utilisateur malveillant non authentifi\u00e9 de provoquer un d\u00e9ni de\nservice \u00e0 distance, de modifier ou de lire des donn\u00e9es de mani\u00e8re\nill\u00e9gitime.\n\nSix vuln\u00e9rabilit\u00e9s de E-businees Suite permettent de porter atteinte \u00e0\nla confidentialit\u00e9 ou \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n\nDeux vuln\u00e9rabilit\u00e9s affectent Oracle Enterprise Manager. Leur\nexploitation permet \u00e0 un utilisateur malveillant de porter atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es, \u00e0 distance.\n\nSept vuln\u00e9rabilit\u00e9s dans les produits Oracle PeopleSoft permettent \u00e0 un\nutilisateur malveillant disposant d\u0027une session valide de provoquer un\nd\u00e9ni de service \u00e0 distance, de modifier ou de lire ind\u00fbment des donn\u00e9es.\n\nSept vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans les serveurs Oracle WebLogic,\ndont quatre sont exploitables \u00e0 distance sans authentification, une avec\nauthentification et deux localement. Elles permettent \u00e0 un utilisateur\nmalveillant de provoquer un d\u00e9ni de service \u00e0 distance, de modifier ou\nde lire des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2008-2621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2621"
    },
    {
      "name": "CVE-2008-2592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2592"
    },
    {
      "name": "CVE-2008-2577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2577"
    },
    {
      "name": "CVE-2008-2608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2608"
    },
    {
      "name": "CVE-2008-2607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2607"
    },
    {
      "name": "CVE-2008-2597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2597"
    },
    {
      "name": "CVE-2008-2612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2612"
    },
    {
      "name": "CVE-2008-2606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2606"
    },
    {
      "name": "CVE-2008-2617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2617"
    },
    {
      "name": "CVE-2008-2605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2605"
    },
    {
      "name": "CVE-2008-2616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2616"
    },
    {
      "name": "CVE-2008-2578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2578"
    },
    {
      "name": "CVE-2008-2586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2586"
    },
    {
      "name": "CVE-2008-2602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2602"
    },
    {
      "name": "CVE-2008-2598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2598"
    },
    {
      "name": "CVE-2008-2596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2596"
    },
    {
      "name": "CVE-2008-2590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2590"
    },
    {
      "name": "CVE-2008-2582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2582"
    },
    {
      "name": "CVE-2008-2610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2610"
    },
    {
      "name": "CVE-2008-2587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2587"
    },
    {
      "name": "CVE-2008-2583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2583"
    },
    {
      "name": "CVE-2008-2594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2594"
    },
    {
      "name": "CVE-2008-2611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2611"
    },
    {
      "name": "CVE-2008-2609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2609"
    },
    {
      "name": "CVE-2008-2595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2595"
    },
    {
      "name": "CVE-2008-2615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2615"
    },
    {
      "name": "CVE-2008-2580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2580"
    },
    {
      "name": "CVE-2008-2614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2614"
    },
    {
      "name": "CVE-2008-2593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2593"
    },
    {
      "name": "CVE-2008-2581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2581"
    },
    {
      "name": "CVE-2008-2613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2613"
    },
    {
      "name": "CVE-2008-2585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2585"
    },
    {
      "name": "CVE-2008-2600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2600"
    },
    {
      "name": "CVE-2008-2604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2604"
    },
    {
      "name": "CVE-2008-2576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2576"
    },
    {
      "name": "CVE-2008-2620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2620"
    },
    {
      "name": "CVE-2008-2588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2588"
    },
    {
      "name": "CVE-2007-1359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-1359"
    },
    {
      "name": "CVE-2008-2584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2584"
    },
    {
      "name": "CVE-2008-2603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2603"
    },
    {
      "name": "CVE-2008-2618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2618"
    },
    {
      "name": "CVE-2008-2589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2589"
    },
    {
      "name": "CVE-2008-2599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2599"
    },
    {
      "name": "CVE-2008-2591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2591"
    },
    {
      "name": "CVE-2008-2601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2601"
    },
    {
      "name": "CVE-2008-2622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2622"
    },
    {
      "name": "CVE-2008-2579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-2579"
    }
  ],
  "initial_release_date": "2008-07-16T00:00:00",
  "last_revision_date": "2008-07-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de mise \u00e0 jour Oracle du 14 juillet 2008 :",
      "url": "http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2008.html"
    }
  ],
  "reference": "CERTA-2008-AVI-367",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-07-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De nombreuses vuln\u00e9rabilit\u00e9s affectent les produits \u003cspan\nclass=\"textit\"\u003eOracle\u003c/span\u003e. L\u0027exploitation de certaines d\u0027entre elles\npermet \u00e0 un utilisateur malveillant d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle et Weblogic",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin Oracle du 14 juillet 2008",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2008-2584 (GCVE-0-2008-2584)

Vulnerability from cvelistv5

gsd-2008-2584

Vulnerability from gsd

fkie_cve-2008-2584

Vulnerability from fkie_nvd

CERTA-2008-AVI-367

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature