Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability

🗓️ 16 Jan 2009 00:00:00Reported by SecurityvulnsType

Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Oracle Secure Backup. Buffer Overflow vulnerability exists Oracle Secure Backup 10.2.0.2 through a malformed NDMP packet. Remote Code Execution. Critical Base Score:10.0. Affected Software: Oracle Secure Backup 10.2.0.2. Sending a malformed NDMP client authentication NDMP_CONECT_CLIENT_AUTH Command packet will cause a buffer overflow due to invalid bounds checking. Use the solution provided by Oracle. FortiGuard Global Security Research Team released a signature Oracle.NDMP.CONNECT.CLIENT.AUTH.User.ID.Buffer.Overflow on Jan 13 2009, which covers this specific vulnerability

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2008-5444	9 May 201000:00	–	circl
Check Point Advisories	Oracle Secure Backup NDMP CONNECT_CLIENT_AUTH Command Buffer Overflow (CVE-2008-5444)	23 Feb 200900:00	–	checkpoint_advisories
CVE	CVE-2008-5444	14 Jan 200901:00	–	cve
Cvelist	CVE-2008-5444	14 Jan 200901:00	–	cvelist
Exploit DB	Oracle Secure Backup - NDMP_CONNECT_CLIENT_AUTH Buffer Overflow (Metasploit)	9 May 201000:00	–	exploitdb
Metasploit	Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflow	23 Feb 200916:26	–	metasploit
NVD	CVE-2008-5444	14 Jan 200901:30	–	nvd
Oracle	CPU Jan 2009	13 Jan 200900:00	–	oracle
Packet Storm	Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflow	26 Nov 200900:00	–	packetstorm
Prion	Design/Logic Flaw	14 Jan 200901:30	–	prion

16 Jan 2009 00:00Current

0.7Low risk

Vulners AI Score0.7

EPSS0.60625