CVE-2009-1978

{"id": "CVE-2009-1978", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-07-14T23:30:00.530", "references": [{"url": "http://osvdb.org/55904", "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/35776", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/35678", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id?1022565", "source": "secalert_us@oracle.com"}, {"url": "http://www.vupen.com/english/advisories/2009/1900", "source": "secalert_us@oracle.com"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-09-059/", "source": "secalert_us@oracle.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51762", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Secure Backup en Oracle Secure Backup 10.2.0.3 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a trav\u00e9s de vectores desconocidos. NOTA: la informaci\u00f3n anterior se obtuvo de la CPU de Oracle de Julio de 2009. Oracle no ha comentado sobre las alegaciones de un investigador independiente que esta vulnerabilidad permite a usuarios remotos autenticados ejecutar c\u00f3digo arbitrario con privilegios de SYSTEM a trav\u00e9s de vectores que implican a property_box.php."}], "lastModified": "2017-08-17T01:30:36.287", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42091C54-567D-4626-98EA-41B568965B23"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}