|
|
>> HP Oracle for Openview (OfO) Multiple Remote and Local Vulnerabilities
|
Title : HP Oracle for Openview (OfO) Multiple Remote and Local Vulnerabilities
VUPEN ID : VUPEN/ADV-2006-0323
CVE ID : CVE-2006-0552
Rated as : High Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-01-25
|
Multiple vulnerabilities were identified in Oracle for Openview (OfO). These flaws, initially reported in Oracle Critical Patch Update (January 2006), could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary files, disclose sensitive information, conduct SQL injection and cross site scripting attacks or bypass certain security restrictions. For additional information, see : VUPEN/ADV-2006-0243
Affected Products
Oracle for OpenView (OfO) version 8.1.7
Oracle for OpenView (OfO) version 9.1.01
Oracle for OpenView (OfO) version 9.2
(on HP-UX, Tru64 UNIX, Linux, Solaris, and Windows)
Solution
Apply Oracle Critical Patch Update (January 2006) :
http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
References
http://www.vupen.com/english/advisories/2006/0323
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=c00593668
ChangeLog
2006-01-25 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
