PT-2006-6096 · Oracle · Peoplesoft Enterprise

Published 2006-10-18 · Updated 2018-10-17 · CVE-2006-5376

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise versions 8.22 GA through 8.22.11 Oracle PeopleSoft Enterprise versions 8.46 GA through 8.46.15 Oracle PeopleSoft Enterprise versions 8.47 GA through 8.47.09 Oracle PeopleSoft Enterprise versions 8.48 GA through 8.48.03

Description The issue affects the PeopleTools component and has remote authenticated attack vectors. The impact of the vulnerabilities is unknown.

Recommendations For Oracle PeopleSoft Enterprise versions 8.22 GA through 8.22.11, update to a version later than 8.22.11. For Oracle PeopleSoft Enterprise versions 8.46 GA through 8.46.15, update to a version later than 8.46.15. For Oracle PeopleSoft Enterprise versions 8.47 GA through 8.47.09, update to a version later than 8.47.09. For Oracle PeopleSoft Enterprise versions 8.48 GA through 8.48.03, update to a version later than 8.48.03.

Fix

Related Identifiers

CVE-2006-5376

Affected Products

Peoplesoft Enterprise

References · 9

• http://securityfocus.com/archive/1/449711/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5376 · Security Note
• http://securityfocus.com/bid/20588 · Patch
• http://secunia.com/advisories/22396 · Note
• http://vupen.com/english/advisories/2006/4065 · Note
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Note
• http://securitytracker.com/id?1017077 · Note
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Note
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Note