Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability

Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Oracle Secure Backup. Buffer Overflow vulnerability exists Oracle Secure Backup 10.2.0.2 through a malformed NDMP packet. Remote Code Execution. Critical Base Score:10.0. Affected Software: Oracle Secure Backup 10.2.0.2. Sending a malformed NDMP client authentication NDMP_CONECT_CLIENT_AUTH Command packet will cause a buffer overflow due to invalid bounds checking. Use the solution provided by Oracle. FortiGuard Global Security Research Team released a signature Oracle.NDMP.CONNECT.CLIENT.AUTH.User.ID.Buffer.Overflow on Jan 13 2009, which covers this specific vulnerability