NVD

Id
48303  
Name
CVE-2009-0993  
Description
Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-15  
Modified Date
2012-10-22  
Seq
2009-0993  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242898 48303 CVE-2009-0993 http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html  View
242899 48303 CVE-2009-0993 20090414 ZDI-09-017: Oracle Applications Server 10g Format String Vulnerability  View
242900 48303 CVE-2009-0993 34461  View
242901 48303 CVE-2009-0993 1022055  View
242902 48303 CVE-2009-0993 TA09-105A  View
242903 48303 CVE-2009-0993 http://www.zerodayinitiative.com/advisories/ZDI-09-017  View
242904 48303 CVE-2009-0993 oracle-appserver-opmn-unspecified(50030)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40229 JVNDB-2009-001235 Oracle Application Server の OPMN コンポーネントにおける脆弱性 Oracle Application Server の OPMN コンポーネントには、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2009-0993 38424 CVE-2009-0993 48303 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001235.html 2009-04-15 2009-05-20 View