OSVDB: Open Sourced Vulnerability Database

Creditee: Joxean Koret

Known Contact Information:

(as of 2007-04-18)
(as of 2007-05-08)
(as of 2007-10-31)

Known Affiliations:

Unaffiliated (as of 2006-10-09)
Zero Day Initiative (ZDI) (as of 2007-04-18)
iDefense Labs VCP (as of 2007-05-08)

Disclosed Vulnerabilities (11):

Disc. Date	OSVDB ID	CVEID	Title
2012-04-19	81475	2012-1675	Oracle Database Server TNS Listener Spoofing Remote Command Execution
2009-04-15	53741	2009-0993	Oracle Application Server Oracle Process Manager and Notification (opmn) Daemon POST URI Handling Remote Format String
2009-01-14	51317	2008-5440	Oracle TimesTen evtdump CGI Module msg Parameter Remote Format String
2009-01-14	51342	2008-5448	Oracle Secure Backup login.php rbtool Parameter Arbitrary Command Execution
2008-10-09	49065	2008-4541	Sun Java System Web Proxy Server FTP Subsystem Unspecified Remote Overflow
2008-04-16	44500	2008-1811	Oracle Application Express flows_030000.wwv_execute_immediate Unspecified Remote Issue
2007-10-31	40080	2007-5766	Oracle E-Business Suite okxLOV.jsp Unspecified SQL Injection
2007-05-08	34392	2007-0221	Microsoft Exchange Server IMAP Literal Processing DoS
2007-04-18	39959	2007-2135	Oracle E-Business Suite ADI_BINARY Arbitrary Document Download
2007-04-18	39958	2007-2170	Oracle E-Business Suite APPLSYS.FND_DM_NODES Arbitrary Node Deletion
2006-10-09	30871	2006-5448	Microsoft Windows DRM drmstor.dll ActiveX Object StoreLicense Function Memory Corruption

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.