CVE-2008-3979: oracle database_10g

EPSS trend

Probability

32.43%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 32.43% on 21-09-2026

21-09-202621-10-2026

EPSS score

32.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaselocalmultipleVerified
Oracle 10g - MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger
auxiliary/sqli/oracle/droptable_trigger
Maturity: poc

References

8 links

osvdb.org/51354VDB EntryX Refsource OSVDB
secunia.com/advisories/33525Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1021561VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2009/0115VDB EntryX Refsource VUPENVendor Advisory
www.oracle.com/technetwork/topics/security/cpujan2009-097901.htmlX Refsource CONFIRM
www.securityfocus.com/bid/33177VDB EntryX Refsource BID
www.exploit-db.com/exploits/8074ExploitX Refsource EXPLOIT DB
www.securityfocus.com/archive/1/500061/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2008-2625oracledatabase_10g+12.07%18y ago14-10-2008 21:00Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.CVE-2008-2624oracledatabase_10g1.17%18y ago14-10-2008 21:00Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.CVE-2008-2595oracledatabase_10g+111.34%18y ago15-07-2008 23:00Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.CVE-2008-1820oracledatabase_10g+22.08%18y ago16-04-2008 10:00Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.CVE-2008-1815oracledatabase_10g+11.26%18y ago16-04-2008 10:00Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB02 is for SQL injection in LOCK_CHANGE_SET.CVE-2008-4015oracledatabase_10g1.72%17y ago14-01-2009 01:00Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH.

All vulnerabilities indatabase_10g

CVE-2008-3979: oracle database_10g

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References