Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5444.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/oracle/osb_ndmp_auth.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Oracle Secure Backup via a crafted NDMP_CONNECT_CLIENT_AUTH packet. It leverages a long username field to overwrite the return address and execute arbitrary payloads, achieving remote code execution.
Description
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.
Exploits (2)
This exploit targets a stack buffer overflow in Oracle Secure Backup via a crafted NDMP_CONNECT_CLIENT_AUTH packet. It leverages a long username field to overwrite the return address and execute arbitrary payloads, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in Oracle Secure Backup via a crafted NDMP_CONNECT_CLIENT_AUTH packet, allowing arbitrary code execution. It targets a specific return address in oracore10.dll for Windows systems.