PT-2008-1014 · Oracle+1 · Peoplesoft Hcm Recruiting+3

Published 2008-04-16 · Updated 2018-10-11 · CVE-2008-1829

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 tethereal package in Debian GNU/Linux (affected versions not specified)

Description The issue affects the PeopleSoft HCM Recruiting component and the tethereal package in Debian GNU/Linux. It has unknown impact and can be exploited remotely. Multiple vulnerabilities in the tethereal package may lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can also be exploited remotely.

Recommendations For PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For tethereal package in Debian GNU/Linux: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-01453

CVE-2008-1829

Affected Products

Debian

Jd Edwards Enterpriseone

Peoplesoft Hcm Recruiting

Ethereal

References · 19

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1829 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3241 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3550 · Security Note
• https://bdu.fstec.ru/vul/2015-01453 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2560 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3829 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2562 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-1829 · Security Note
• http://securityfocus.com/archive/1/491024/100/0/threaded · Vendor Advisory
• http://securitytracker.com/id?1019855 · Note
• http://secunia.com/advisories/29874 · Note
• http://vupen.com/english/advisories/2008/1267/references · Note
• http://vupen.com/english/advisories/2008/1233/references · Note
• http://debian.org/security/dsa-1942 · Note