vendor:
TimesTen
by:
Joxean Koret
8.8
CVSS
HIGH
Format String
134
CWE
Product Name: TimesTen
Affected Version From: 11.2.1.6.0
Affected Version To: 11.2.1.6.0
Patch Exists: YES
Related CWE: CVE-2009-0025
CPE: a:oracle:timesten:11.2.1.6.0
Metasploit:
https://www.rapid7.com/db/vulnerabilities/moodle-cve-2009-4300/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0265/, https://www.rapid7.com/db/vulnerabilities/f5-big-ip-cve-2009-0265/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/f5-big-ip-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/dns-bind-ssl-signature-spoofing/, https://www.rapid7.com/db/vulnerabilities/ibm-aix-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-0020/, https://www.rapid7.com/db/vulnerabilities/apple-osx-bind-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-0025/, https://www.rapid7.com/db/vulnerabilities/vmsa-2009-0004-cve-2009-0025/
Other Scripts:
https://www.infosecmatter.com/nessus-plugin-library/?id=38743, https://www.infosecmatter.com/nessus-plugin-library/?id=26165, https://www.infosecmatter.com/nessus-plugin-library/?id=137170, https://www.infosecmatter.com/nessus-plugin-library/?id=99569, https://www.infosecmatter.com/nessus-plugin-library/?id=147379, https://www.infosecmatter.com/nessus-plugin-library/?id=76303, https://www.infosecmatter.com/nessus-plugin-library/?id=53001, https://www.infosecmatter.com/list-of-metasploit-windows-exploits-detailed-spreadsheet/, https://www.infosecmatter.com/nessus-plugin-library/?id=10759, https://www.infosecmatter.com/metasploit-module-library/?mm=exploit/windows/browser/ms13_009_ie_slayoutrun_uaf
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2009
Oracle TimesTen Remote Format String
This exploit allows a remote attacker to execute arbitrary code on vulnerable installations of Oracle TimesTen. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the 'evtdump' parameter. By supplying a specially crafted format string, an attacker can cause a stack-based buffer overflow and execute arbitrary code.
Mitigation:
Upgrade to Oracle TimesTen version 11.2.1.7.0 or later.