Oracle Fusion Middleware & Application Server Vulnerability

Last Update Date: 19 Sep 2011 12:18 Release Date: 19 Sep 2011 6519 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

A vulnerability have been identified in Oracle Fusion Middleware & Application Server, which can be exploited by remote attacker cause denial of service attack.

Impact

Denial of Service

System / Technologies affected

Oracle Fusion Middleware 11g Release 1, versions 11.1.1.3.0, 11.1.1.4.0, 11.1.1.5.0
Oracle Application Server 10g Release 3, version 10.1.3.5.0 (Only affected when Oracle HTTP Server 10g based on Apache 2.0 has been installed from Application Server Companion CD)
Oracle Application Server 10g Release 2, version 10.1.2.3.0 (Only affected when Oracle HTTP Server 10g based on Apache 2.0 has been installed from Application Server Companion CD)

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1357871.1

Vulnerability Identifier

CVE-2011-3192

Source

Oracle