Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-5444

79
FAUCET Score

CVE-2008-5444 is an unspecified critical vulnerability affecting Oracle Secure Backup 10.2.0.2, allowing remote attackers to compromise confidentiality, integrity, and availability. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low complexity, and complete impact on all security aspects. While not on the KEV catalog, a Metasploit module for a buffer overflow exploit exists, indicating readily available exploit code, despite a lack of community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
10.2.0.2CPE matchmatch criteria
cpe:2.3:a:oracle:secure_backup:10.2.0.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
60.62%
Probability of exploitation in next 30 days
EPSS Percentile
99.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
Metasploit: Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflow · Jan 14, 2009
ExploitDB: EDB-16343 · May 9, 2010
This CVE's current EPSS score of 0.6062 is in the 98th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

oraclevendor investigatingvia nvd_reference
View patch

References

secunia.com / advisories/33525
Permissions Required
oracle.com / technetwork/topics/security/cpujan2009-097901.html
Vendor Advisory
securityfocus.com / bid/33177
Third Party AdvisoryVDB Entry
vupen.com / english/advisories/2009/0115
Not Applicable