CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.2%
Added: 01/28/2009
CVE: CVE-2008-5444
BID: 33177
OSVDB: 51340
Oracle Secure Backup is a centralized tape backup management solution for Oracle Database.
A buffer overflow vulnerability in Oracle Secure Backup when handling the NDMP protocol allows remote attackers to execute arbitrary commands by sending a long, specially crafted Username value in an **NDMP_CONECT_CLIENT_AUTH**
request.
Apply the January 2009 Oracle Critical Patch Update.
<http://archives.neohapsis.com/archives/bugtraq/2009-01/0143.html>
Exploit works on Oracle Secure Backup 10.1.0.3.
Windows 2000
Linux