Vulnerability Details : CVE-2008-3984
Public exploit exists!
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.
Products affected by CVE-2008-3984
- cpe:2.3:a:oracle:database_9i:9.2.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_11i:11.1.0.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-3984
95.81%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2008-3984
-
Oracle DB SQL Injection via SYS.LT.REMOVEWORKSPACE
Disclosure Date: 2008-10-13First seen: 2020-04-26auxiliary/sqli/oracle/lt_removeworkspaceThis module exploits a sql injection flaw in the REMOVEWORKSPACE procedure of the PL/SQL package SYS.LT. Any user with execute privilege on the vulnerable package can exploit this vulnerability. Authors: - Sh2kerr <research[ad]dsecrg.com>
CVSS scores for CVE-2008-3984
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
8.0
|
4.9
|
NIST |
References for CVE-2008-3984
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/45887
-
http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
Vendor Advisory
-
http://www.securitytracker.com/id?1021050
Third Party Advisory;VDB Entry
Jump to