Intrusion PreventionOracle.Internet.Directory.Pre.Authentication.LDAP.DoS
Description
This indicates an attack attempt against a denial-of-service vulnerability in Oracle Internet Directory.
The vulnerability is caused by a NULL pointer dereference error when the vulnerable software handles a specially crafted LDAP request.
Affected Products
Oracle Database 11g version 11.1.0.6
Oracle Database 10g Release 2 version 10.2.0.2
Oracle Database 10g Release 2 version 10.2.0.3
Oracle Database 10g Release 2 version 10.2.0.4
Oracle Database 10g version 10.1.0.5
Oracle Database 9i Release 2 version 9.2.0.8
Oracle Database 9i Release 2 version 9.2.0.8DV
Oracle TimesTen In-Memory Database version 7.0.3.0.0
Impact
Denial of service
Recommended Actions
Apply the patch supplied by the vendor:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15728 |
| Created | Apr 01, 2009 |
| Updated | Jun 07, 2022 |
| Risk |
|
| CVE ID | CVE-2008-2595 |
| Exploit Prediction Score | 81.06% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Oracle |