CVE-2009-1978

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php.

• http://osvdb.org/55904
• http://secunia.com/advisories/35776
• http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
• http://www.securityfocus.com/bid/35678
• http://www.securitytracker.com/id?1022565
• http://www.vupen.com/english/advisories/2009/1900
• http://www.zerodayinitiative.com/advisories/ZDI-09-059/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51762
• http://osvdb.org/55904
• http://secunia.com/advisories/35776
• http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
• http://www.securityfocus.com/bid/35678
• http://www.securitytracker.com/id?1022565
• http://www.vupen.com/english/advisories/2009/1900
• http://www.zerodayinitiative.com/advisories/ZDI-09-059/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51762

Published

Jul 14, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1972Unspecified vulnerability in the Auditing component in Oracl…
• CVE-2009-1973Unspecified vulnerability in the Virtual Private Database co…
• CVE-2009-1974Unspecified vulnerability in the WebLogic Server component i…
• CVE-2009-1975Unspecified vulnerability in the WebLogic Server component i…
• CVE-2009-1976Unspecified vulnerability in the HTTP Server component in Or…
• CVE-2009-1977Unspecified vulnerability in the Oracle Secure Backup compon…
• CVE-2009-1979Unspecified vulnerability in the Network Authentication comp…
• CVE-2009-1980Unspecified vulnerability in the Oracle Application Object L…
• CVE-2009-1981Unspecified vulnerability in the Highly Interactive Client c…
• CVE-2009-1982Unspecified vulnerability in the Oracle Applications Framewo…
• CVE-2009-1983Unspecified vulnerability in the Oracle iStore component in …
• CVE-2009-1984Unspecified vulnerability in the Application Install compone…