PT-2007-1751 · Oracle · Oracle E-Business Suite/Applications+2

Published 2007-01-16 · Updated 2017-07-29 · CVE-2007-0279

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle HTTP Server version 9.2.0.8 Oracle E-Business Suite and Applications version 11.5.10CU2

Description: The issue concerns multiple unspecified vulnerabilities with unknown impact and attack vectors. It is reported that the current Oracle version has vulnerabilities allowing remote attackers to bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive data.

Recommendations: For Oracle HTTP Server version 9.2.0.8, update to a version that addresses these vulnerabilities. For Oracle E-Business Suite and Applications version 11.5.10CU2, update to a version that addresses these vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0279

Affected Products

Oracle Database

Oracle E-Business Suite/Applications

Oracle Http Server

References · 13

• http://secunia.com/advisories/23794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0279 · Security Note
• http://us-cert.gov/cas/techalerts/TA07-017A.html · Patch
• http://osvdb.org/32881 · Note
• http://osvdb.org/32887 · Note
• http://securityfocus.com/bid/22083 · Note
• http://osvdb.org/32882 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0279 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31541 · Note
• http://securitytracker.com/id?1017522 · Note
• http://osvdb.org/32886 · Note
• http://oracle.com/technetwork/topics/security/cpujan2007-101493.html · Note
• http://osvdb.org/32885 · Note