PT-2015-2496 · Oracle · Oracle Outside In Technology+1

Francis Provencher · Publicado 2015-10-21 · Atualizado 2018-10-09 · CVE-2015-4878

Positive Technologies (AI Summary)

CVSS v2.0

1.5

Baixa

Vetor base

AV:L/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.5.0 through 8.5.2

Description The issue is related to errors in the code of the Oracle Outside In Technology component. It may allow a local attacker to cause a denial of service via unknown vectors related to Outside In Filters.

Recommendations For versions 8.5.0 through 8.5.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11861

CVE-2015-4878

Produtos afetados

Oracle Fusion Middleware

Oracle Outside In Technology

Referências · 11

• 🔥 https://exploit-db.com/exploits/38789 · Exploit
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixDB · Nota
• http://oracle.com/technetwork/topics/security/alerts-086861.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4878 · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · Aviso do Fabricante
• http://packetstormsecurity.com/files/134089/Oracle-Outside-In-Buffer-Overflow.html · Nota
• http://securitytracker.com/id/1033898 · Nota
• https://bdu.fstec.ru/vul/2015-11861 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-4878 · Nota de Segurança
• http://securityfocus.com/bid/77133 · Nota
• http://securityfocus.com/archive/1/536762/100/0/threaded · Nota