Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a buffer overflow in observiced.exe that allows remote attackers to execute arbitrary code via vectors related to a "reverse lookup of connections" to TCP port 10000.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Secure Backup 'observiced.exe'服务栈缓冲区溢出漏洞
Vulnerability Description
Oracle Secure Backup是美国甲骨文（Oracle）公司的一套中央磁带备份管理和互联网存储解决方案。 Oracle Secure Backup 10.2.0.3版本的Oracle Secure Backup组件中存在基于栈的缓冲区溢出漏洞。由于默认监听于TCP 10000端口的Oracle Secure Backup服务守护程序(observiced.exe)对到端口的反向连接查询缺少边界检查，未经认证的远程攻击者可以通过向该端口提交恶意请求触发栈溢出，导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A