Oracle Products Multiple Vulnerabilities
RISK: Medium Risk
Multiple vulnerabilities have been identified in various Oracle products, which could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary data, disclose sensitive information, conduct SQL injection and cross site scripting attacks, or bypass security restrictions.
These issues are caused by errors in the XML DB, Advanced Queuing, Spatial, Upgrade/Downgrade, Ultra Search, Core RDBMS, Jinitiator, BPEL Worklist Application, Forms, JDeveloper, Internet Directory, Mobile Application Server, Application Object Library, Applications Framework, Applications Manager, CRM Technical Foundation, Applications Technology Stack and PeopleTools components.
Impact
- Denial of Service
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
- Oracle Database 11g version 11.1.0.6
- Oracle Database 10g Release 2 version 10.2.0.2
- Oracle Database 10g Release 2 version 10.2.0.3
- Oracle Database 10g version 10.1.0.5
- Oracle Database 9i Release 2 version 9.2.0.8
- Oracle Database 9i Release 2 version 9.2.0.8DV
- Oracle Database 9i version 9.0.1.5 FIPS+
- Oracle Application Server 10g Release 3 (10.1.3) version 10.1.3.0.0
- Oracle Application Server 10g Release 3 (10.1.3) version 10.1.3.1.0
- Oracle Application Server 10g Release 3 (10.1.3) version 10.1.3.3.0
- Oracle Application Server 10g Release 2 (10.1.2) version 10.1.2.0.2
- Oracle Application Server 10g Release 2 (10.1.2) version 10.1.2.1.0
- Oracle Application Server 10g Release 2 (10.1.2) version 10.1.2.2.0
- Oracle Application Server 10g (9.0.4) version 9.0.4.3
- Oracle Application Server 9i Release 1 version 1.0.2.2
- Oracle Collaboration Suite 10g version 10.1.2
- Oracle E-Business Suite Release 12 versions 12.0.0 through 12.0.3
- Oracle E-Business Suite Release 11i versions 11.5.9 through 11.5.10 CU2
- Oracle PeopleSoft Enterprise PeopleTools version 8.22
- Oracle PeopleSoft Enterprise PeopleTools version 8.48
- Oracle PeopleSoft Enterprise PeopleTools version 8.49
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Apply Oracle Critical Patch Update (January 2008) :
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2008.html
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with