Oracle Secure Global Desktop Administration Console Detection

Binary data oraclesecureglobaldesktophttpdetect.nbin...

Oracle Secure Global Desktop ttaauxserv Remote Denial of Service (remote check)

The remote host is running a version of Oracle Secure Global Desktop that may have an unspecified denial of service vulnerability in the ttaauxserv binary. Note that this may be a false positive, as this plugin only checks if a vulnerable version of Oracle Secure Global Desktop is running, and do...

CVE-2013-3834

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv...

CVE-2013-3834

CVE-2013-3834 concerns Oracle Secure Global Desktop (Oracle Virtualization 5). The vulnerability affects the ttaauxserv binary in the Oracle Secure Global Desktop component and is described as an unspecified remote vulnerability that can affect availability via unknown vectors, enabling a remote ...

PT-2013-4670

Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 5 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to ttaauxserv in the Oracle Secure Global Desktop component. Recommendations For...

CVE-2013-3834: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv...

Oracle Secure Backup 10.3.0.1 RCE

Remote command execution vulnerability in Oracle Secure Backup Administration Server propertybox.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Oracle Database Multiple Vulnerabilities (April 2008 CPU)

The remote Oracle database server is missing the April 2008 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Audit - Authentication - Change Data Capture - Core RDBMS - Data Pump - Export - Oracle Enterprise...

Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability

$Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Oracle Secure Backup Authentication Bypass/Command Injection

Exploit for php platform in category web applications $Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensin...

Oracle Secure Backup - Authentication Bypass/Command Injection (Metasploit)

$Id: osbunamejlist.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Oracle Secure Backup Administration Server login.php uname Parameter Arbitrary Command Injection

The version of Oracle Secure Backup Administration Server running on the remote host fails to adequately sanitize user-supplied input to the 'uname' parameter of 'login.php'. The system performs some sanitization which limits exploitation of this issue, but code execution is still possible. A...

Oracle Secure Backup validate_login Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the validatelogin function defined within /apache/htdocts/php/common.php. The...

CVE-2011-2252

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261...

CVE-2011-2251

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect integrity via unknown vectors...

CVE-2011-2251

CVE-2011-2251 is linked to Oracle Secure Backup Administration Server login.php XSS in the mode parameter. The Nessus plugin notes input is not properly sanitized, enabling a remote attacker to lure a user to a crafted URL and potentially execute arbitrary script code. This is the concrete detail...

CVE-2011-2252: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2261...

PT-2011-3722

Name of the Vulnerable Software and Affected Versions Oracle Secure Backup version 10.3.0.3 Description The issue affects the confidentiality, integrity, and availability of the system. It is related to a command injection vulnerability in the validate login command, which could potentially allow...

PT-2011-3715

Name of the Vulnerable Software and Affected Versions Oracle Secure Backup version 10.3.0.3 Description The issue affects the confidentiality, integrity, and availability of the system. It is exploited via unknown vectors. Recommendations For Oracle Secure Backup version 10.3.0.3, at the moment,...

CVE-2011-2261: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2011-2252...