PT-2009-2700 · Oracle · Oracle Jinitiator+2

Publicado 2009-09-14 · Atualizado 2012-10-23 · CVE-2008-7233

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Server version 1.1.8.26 E-Business Suite version 11.5.10.2

Description The issue affects confidentiality, integrity, and availability. It is related to the Oracle Jinitiator component. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Oracle Application Server version 1.1.8.26, update to a version that addresses the issue related to the Oracle Jinitiator component. For E-Business Suite version 11.5.10.2, update to a version that addresses the issue related to the Oracle Jinitiator component. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2008-7233

Produtos afetados

E-Business Suite

Oracle Application Server

Oracle Jinitiator

Referências · 12

• 🔥 http://securityfocus.com/bid/27229 · Exploit
• http://secunia.com/advisories/28518 · Aviso do Fabricante
• http://secunia.com/advisories/28556 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7233 · Nota
• http://osvdb.org/40294 · Nota
• http://vupen.com/english/advisories/2008/0150 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA08-017A.html · Correção
• http://vupen.com/english/advisories/2008/0180 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-7233 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=120058413923005&w=2 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpujan2008-086860.html · Nota
• http://securitytracker.com/id?1019218 · Nota