Vulnerability in Oracle Secure Backup

CVE-2008-5445

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed private Protocol data that triggers a NULL pointer dereference.

EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.

Affected products

Oracle Secure_backup — versions 10.2.0.2
N/a — versions n/a

References

secalert_us@oracle.com (x_refsource_MISC)
secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)
secalert_us@oracle.com (mailing-list, x_refsource_BUGTRAQ)