Oracle Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in various Oracle and BEA products, which could be exploited by remote or local attackers to cause a denial of service, read and manipulate certain data, disclose sensitive information, conduct SQL injection attacks, bypass security restrictions, or execute arbitrary commands.

These issues are caused by errors in the Advanced Queuing, Database Scheduler, Advanced Replication, Authentication, Oracle Database Vault, Oracle Spatial, Data Pump, Core RDBMS, Instance Management, Resource Manager, TimesTen Client/Server, Oracle HTTP Server, Oracle Portal, Oracle Internet Directory, Hyperion BI Plus, Mobile Application Server, Oracle Report Manager, Oracle iStore, Oracle Application Object Library, Oracle Applications Technology Stack, PeopleSoft PeopleTools, WebLogic Server Plugins and WebLogic Server components.

1. An unspecified error exists in Oracle HTTP Server.

2. A NULL-pointer dereference error in Oracle Internet Directory can be exploited to cause a DoS by sending a specially crafted LDAP request to port 389/TCP or port 636/TCP.

3. A boundary error in the DBMS_AQELM package in Oracle Database can be exploited to cause a buffer overflow by passing an overly large string as a parameter to a procedure.

Successful exploitation of this vulnerability may allow execution of arbitrary code

4. An error due to use of an untrusted library path in a setuid root program can be exploited to gain root privileges.

Successful exploitation of this vulnerability requires access to the database owner account (typically "oracle") or being a member of the oracle installation group (typically "oinstall").

5. Input to the "SHOW" procedure within the "WWV_RENDER_REPORT" package is not properly sanitised before being used. This can be exploited to manipulate PLSQL statements by injecting certain PLSQL code.

Successful exploitation allows to gain full control of a backend Oracle database server via the front end web server.

6. An unspecified vulnerability in WebLogic Server within the ForeignJMS component and in the WebLogic console or server log can be exploited to disclose sensitive information.

7. Some unspecified vulnerabilities in WebLogic Server within in the Console/WLST can be exploited to gain escalated privileges.

8. An unspecified vulnerability in WebLogic Server within the WebLogic plug-ins for Apache, Sun and IIS Web servers can be exploited to disclose sensitive information.

9. An unspecified vulnerability in WebLogic Server within the processing of JSP pages can be exploited to disclose sensitive information.

10. An unspecified vulnerability in WebLogic Server within the UDDI Explorer can be exploited to compromise a vulnerable system.

11. An unspecified vulnerability in WebLogic Server can be exploited to cause a DoS.

The remaining vulnerabilities are caused due to unspecified errors. No more information is currently available.