CVE-2008-5440
highpriority · track · 34EPSS 0.119 · 96 %ileEUUSEPSS · scored 2026-10-28
Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- oracle timesten in-memory database= 7.0.5.0.0nvdUScpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (18)
External citations — patches, advisories, analysis.
- http://joxeankoret.com/blog/?p=41enisa_euvd
- http://secunia.com/advisories/33525enisa_euvd
- http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.htmlenisa_euvd
- http://www.securityfocus.com/archive/1/500078/100/0/threadedenisa_euvd
- http://www.securityfocus.com/archive/1/500080/100/0/threadedenisa_euvd
- http://www.securityfocus.com/bid/33177enisa_euvd
- http://www.vupen.com/english/advisories/2009/0115enisa_euvd
- http://www.zerodayinitiative.com/advisories/ZDI-09-004enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan