Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-1979.
PoCs published by Metasploit, Dennis Yurichev, jduck, including Metasploit module exploits/windows/oracle/tns_auth_sesskey.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Oracle 10gR2 TNS Listener via a malformed AUTH_SESSKEY value. It achieves remote code execution by leveraging SEH overwrites and precise payload delivery.
Description
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in Oracle 10gR2 TNS Listener via a malformed AUTH_SESSKEY value. It achieves remote code execution by leveraging SEH overwrites and precise payload delivery.
This exploit targets CVE-2009-1979, a vulnerability in Oracle TNS Listener. It crafts malicious TNS packets to trigger a buffer overflow, potentially leading to remote code execution. The code includes network communication functions to interact with the vulnerable service.
This Metasploit module exploits a stack buffer overflow in Oracle 10gR2 TNS Listener via a maliciously crafted AUTH_SESSKEY value, leading to arbitrary code execution. It includes SEH-based exploitation and automatic target detection for specific Oracle versions.