CVE-2008-5449

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448...

CVE-2008-3981

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2008-5448

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449...

CVE-2008-5441

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443...

CVE-2008-5444

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449...

CVE-2008-4006

CVE-2008-4006 concerns Oracle Secure Backup Administration Server (Oracle Secure Backup 10.1.0.3). The issue is a remote command-ex execution vulnerability in the web interface, allowing an unauthenticated attacker to execute arbitrary commands via parameters in login.php (ora_osb_lcookie). Impac...

CVE-2008-5442

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443...

CVE-2008-4006

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2008-5442

Oracle Secure Backup 10.2.0.2 is affected by multiple Denial of Service vulnerabilities (CVE-2008-5441/5442/5443) due to insufficient input validation in NDMP processing. Remote attackers can crash the service by sending malformed NDMP packets (connect/open, connect/close, mover/get_state). Explo...

CVE-2008-5448

CVE-2008-5448 is described in connected documents as a remote command execution vulnerability in Oracle Secure Backup Administration Server login.php, affecting Oracle Secure Backup versions 10.1.0.3 to 10.2.0.2. An attacker, via HTTP requests to the affected interface, could execute arbitrary co...

CVE-2008-5444

CVE-2008-5444 affects Oracle Secure Backup 10.2.0.2 (and related NDMP functionality) with a stack/NDMP_CONNECT_CLIENT_AUTH message handling buffer overflow that enables remote code execution. Public references note exploitation in practice (Metasploit modules for NDMP_CONNECT_CLIENT_AUTH) and dis...

CVE-2008-5449

Technical details for CVE-2008-5449 are not included in the provided documents. Public information about affected components/versions/vectors is not available here; monitor for updates from official advisories.

CVE-2008-5441

Summary (CVE-2008-5441): Oracle Secure Backup 10.2.0.2 contains a denial-of-service vulnerability in NDMP packet handling. Remote, unauthenticated attackers can crash the service by sending malformed NDMP requests (e.g., NDMP_CONNECT_OPEN). This CVE is related to, but distinct from, CVE-2008-5442...

CVE-2008-3981

Oracle Secure Backup 10.1.0.1 contains an unspecified vulnerability in the Oracle Secure Backup component that could allow remote attackers to affect confidentiality via unknown vectors. The NVD entry (CVE-2008-3981) notes a remote, unauthenticated exposure with partial confidentiality impact (CV...

CVE-2008-5449

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448...

CVE-2008-3981

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors...

Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability

Exploit for multiple platform in category remote exploits ================================================================== Oracle Secure Backup 10g execqr Command Injection Vulnerability ================================================================== Oracle Secure Backup 10g Remote Code...

Oracle Secure Backup exec_qr() Command Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine execqr defined in the web script login.php. The user-supplied variabl...

Oracle Secure Backup 10g - 'exec_qr()' Command Injection

Oracle Secure Backup 10g Remote Code Execution ============================================== Product Description =================== Oracle Secure Backup is a centralized tape backup management software providing secure data protection for heterogeneous file systems and the Oracle Database...

Oracle Secure Backup Administration Server login.php Arbitrary Command Injection

The remote version of Oracle Secure Backup Administration Server fails to sanitize user-supplied input to various parameters used in the 'login.php' script before using it. By sending specially crafted arguments an attacker can exploit it to execute code on the remote host with the web server...