CVE-2008-4006

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2008-5449

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448...

CVE-2008-3981

Oracle Secure Backup 10.1.0.1 contains an unspecified vulnerability in the Oracle Secure Backup component that could allow remote attackers to affect confidentiality via unknown vectors. The NVD entry (CVE-2008-3981) notes a remote, unauthenticated exposure with partial confidentiality impact (CV...

CVE-2008-4006

CVE-2008-4006 concerns Oracle Secure Backup Administration Server (Oracle Secure Backup 10.1.0.3). The issue is a remote command-ex execution vulnerability in the web interface, allowing an unauthenticated attacker to execute arbitrary commands via parameters in login.php (ora_osb_lcookie). Impac...

CVE-2008-5448

CVE-2008-5448 is described in connected documents as a remote command execution vulnerability in Oracle Secure Backup Administration Server login.php, affecting Oracle Secure Backup versions 10.1.0.3 to 10.2.0.2. An attacker, via HTTP requests to the affected interface, could execute arbitrary co...

CVE-2008-5448

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449...

CVE-2008-5441

Summary (CVE-2008-5441): Oracle Secure Backup 10.2.0.2 contains a denial-of-service vulnerability in NDMP packet handling. Remote, unauthenticated attackers can crash the service by sending malformed NDMP requests (e.g., NDMP_CONNECT_OPEN). This CVE is related to, but distinct from, CVE-2008-5442...

CVE-2008-5442

Oracle Secure Backup 10.2.0.2 is affected by multiple Denial of Service vulnerabilities (CVE-2008-5441/5442/5443) due to insufficient input validation in NDMP processing. Remote attackers can crash the service by sending malformed NDMP packets (connect/open, connect/close, mover/get_state). Explo...

CVE-2008-3981

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors...

Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflow

The module exploits a stack buffer overflow in Oracle Secure Backup. When sending a specially crafted NDMPCONNECTCLIENTAUTH packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/oracle/osb/ndmpauth msf undefinedndmpauth show actions ...actions... msf...

CVE-2008-5441: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443...

CVE-2008-5444: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449...

CVE-2008-5449: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448...

CVE-2008-3981: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors...

Oracle Secure Backup exec_qr() Command Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine execqr defined in the web script login.php. The user-supplied variabl...

Oracle Secure Backup Administration Server login.php Arbitrary Command Injection

The remote version of Oracle Secure Backup Administration Server fails to sanitize user-supplied input to various parameters used in the 'login.php' script before using it. By sending specially crafted arguments an attacker can exploit it to execute code on the remote host with the web server...

Oracle Secure Backup 10g exec_qr() Command Injection Vulnerability

Exploit for multiple platform in category remote exploits ================================================================== Oracle Secure Backup 10g execqr Command Injection Vulnerability ================================================================== Oracle Secure Backup 10g Remote Code...

CVE-2008-5445: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that...

CVE-2008-5442: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443...

CVE-2008-5448: Undefined Security Weakness

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449...