CVE

Id
42656  
CVE No.
CVE-2010-0072  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a buffer overflow in observiced.exe that allows remote attackers to execute arbitrary code via vectors related to a "reverse lookup of connections" to TCP port 10000.  
Phase
Assigned (20091216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
464359 42656 CVE-2010-0072 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html  View
464360 42656 CVE-2010-0072 CERT:TA10-012A  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35245 JVNDB-2010-001025 Oracle Database の Application Express Application Builder コンポーネントにおける脆弱性 Oracle Database の Application Express Application Builder コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-0076 42656 6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001025.html  View