|
|
>> Oracle Products Multiple SQL Injection and Security Bypass Vulnerabilities
|
Multiple vulnerabilities were identified in various Oracle products, which could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary files, disclose sensitive information, conduct SQL injection and cross site scripting attacks or bypass certain security restrictions. These flaws are due to errors in the Connection Manager, Net Listener, XML Database, Reports, Oracle HTTP Server, Email Server, Oracle Collaboration Suite Wireless and Voice, Oracle Content Management SDK, Oracle Content Services, and in various Oracle PL/SQL packages.
Affected Products
PeopleSoft Enterprise Portal version 8.9
PeopleSoft Enterprise Portal version 8.8
PeopleSoft Enterprise Portal version 8.4
Oracle9i Database Release 2 version 9.2.0.7
Oracle9i Database Release 2 version 9.2.0.6
Oracle9i Database Release 1 version 9.0.1.5 FIPS
Oracle9i Database Release 1 version 9.0.1.5
Oracle9i Database Release 1 version 9.0.1.4
Oracle9i Collaboration Suite Release 2 version 9.0.4.2
Oracle9i Application Server Release 1 version 1.0.2.2
Oracle8i Database Release 3 version 8.1.7.4
Oracle8 Database Release 8.0.6 version 8.0.6.3
Oracle Workflow versions 11.5.1 through 11.5.9.5
Oracle Enterprise Manager 10g Grid Control version 10.1.0.4
Oracle Enterprise Manager 10g Grid Control version 10.1.0.3
Oracle E-Business Suite Release 11i versions 11.5.1 through 11.5.10 CU2
Oracle E-Business Suite Release 11.0
Oracle Developer Suite version 9.0.4.2
Oracle Developer Suite version 9.0.4.1
Oracle Developer Suite version 9.0.2.1
Oracle Developer Suite version 6i
Oracle Developer Suite version 10.1.2.0
Oracle Database 10g Release 2 version 10.2.0.1
Oracle Database 10g Release 1 version 10.1.0.5
Oracle Database 10g Release 1 version 10.1.0.4.2
Oracle Database 10g Release 1 version 10.1.0.4
Oracle Database 10g Release 1 version 10.1.0.3
Oracle Collaboration Suite 10g Release 1 version 10.1.2
Oracle Collaboration Suite 10g Release 1 version 10.1.1
Oracle Application Server 10g Release 2 version 10.1.2.1.0
Oracle Application Server 10g Release 2 version 10.1.2.0.2
Oracle Application Server 10g Release 2 version 10.1.2.0.1
Oracle Application Server 10g Release 2 version 10.1.2.0.0
Oracle Application Server 10g Release 1 (9.0.4) version 9.0.4.2
Oracle Application Server 10g Release 1 (9.0.4) version 9.0.4.1
JD Edwards EnterpriseOne Tools OneWorld Tools version SP23_L1
JD Edwards EnterpriseOne Tools OneWorld Tools version 8.95.F1
Solution
Apply patches :
http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
References
http://www.vupen.com/english/advisories/2006/0243
http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html
http://www.red-database-security.com/advisory/oracle_sql_injection_kupv$ft.html
http://www.red-database-security.com/advisory/oracle_sql_injection_kupv$ft_int.html
http://www.red-database-security.com/advisory/oracle_tde_wallet_password.html
http://www.red-database-security.com/advisory/oracle_tde_unencrypted_sga.html
http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html
http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html
http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html
Credits
Vulnerabilities reported by Raffaele Amendola, Cesar Cerrudo, Esteban Martinez Fayo, Joxean Koret, Alexander Kornbrust, David Litchfield, rinivas Nookala, Steve Orrin formally and Amichai Shulman.
ChangeLog
2006-01-18 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
