CVE-2008-5448 Other in n/a

Critical 10.0 Published 14 Jan 2009 Updated 7 Aug 2024

Remote attackers can compromise confidentiality, integrity, and availability of Oracle Secure Backup via unspecified vectors.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2008-5448?

CVE-2008-5448 is a critical vulnerability in n/a, published on 14 Jan 2009. It can be exploited over the network.

Official description

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.

Which versions are affected by CVE-2008-5448?

It affects 1 product.

Products include Oracle Secure Backup.

How do I fix CVE-2008-5448?

No fix has been published for CVE-2008-5448 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-5448 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-5448 exists.

Public exploit code: 1 Metasploit module.

Sources

Also known as GHSA-qpj8-xcmr-qg4j.