HTTP: Oracle Secure Backup Administration Command Injection

This signature detects attempts to exploit a known vulnerability in Oracle Secure Backup. It is due to an insufficient sanitizing when handling the $selector variable. A remote authenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to the index.php on the target server. Successful exploitation of this can allow a remote authenticated attacker to execute arbitrary commands under the credentials of the SYSTEM account.

Extended Description

Oracle Secure Backup is prone to a remote vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'Valid Session' privileges. This vulnerability affects the following supported versions: 10.3.0.1

Affected Products

Oracle secure_backup

References

BugTraq: 41597

CVE: CVE-2010-0906

URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2010.html http://www.zerodayinitiative.com/advisories/zdi-10-121/

Short Name

HTTP:ORACLE:BACKUP-CMD-INJ

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: Oracle Secure Backup Administration Command Injection

Extended Description

Affected Products

References

Found a potential security threat?