CVEvulnerability
CVE-2009-1977
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php.
Affected configurations
• oracle secure backup 10.2.0.3
References
- http://osvdb.org/55903 osvdb.org
- http://secunia.com/advisories/35776 secunia.com
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html www.oracle.com
- http://www.securityfocus.com/bid/35672 www.securityfocus.com
- http://www.securitytracker.com/id?1022565 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1900 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-058/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51761 exchange.xforce.ibmcloud.com
- http://osvdb.org/55903 osvdb.org
- http://secunia.com/advisories/35776 secunia.com
- http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html www.oracle.com
- http://www.securityfocus.com/bid/35672 www.securityfocus.com
- http://www.securitytracker.com/id?1022565 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1900 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-058/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51761 exchange.xforce.ibmcloud.com