CVE-2008-1820: Oracle Database 10g

Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.

Affected products

• Oracle Database 10g: version 10.1.0.5 only; version 10.2.0.3 only
• Oracle Database 11g: version 11.1.0.6 only
• Oracle Database 9i: version 9.2.0.8 only

Published 2008-04-16. Last modified 2026-06-16.