PT-2009-2700 · Oracle · Oracle Jinitiator+2

Published 2009-09-14 · Updated 2012-10-23 · CVE-2008-7233

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Server version 1.1.8.26 E-Business Suite version 11.5.10.2

Description The issue affects confidentiality, integrity, and availability. It is related to the Oracle Jinitiator component. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For Oracle Application Server version 1.1.8.26, update to a version that addresses the issue related to the Oracle Jinitiator component. For E-Business Suite version 11.5.10.2, update to a version that addresses the issue related to the Oracle Jinitiator component. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2008-7233

Affected Products

E-Business Suite

Oracle Application Server

Oracle Jinitiator

References · 12

• 🔥 http://securityfocus.com/bid/27229 · Exploit
• http://secunia.com/advisories/28518 · Vendor Advisory
• http://secunia.com/advisories/28556 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0150 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA08-017A.html · Patch
• http://vupen.com/english/advisories/2008/0180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-7233 · Security Note
• http://marc.info/?l=bugtraq&m=120058413923005&w=2 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7233 · Note
• http://osvdb.org/40294 · Note
• http://oracle.com/technetwork/topics/security/cpujan2008-086860.html · Note
• http://securitytracker.com/id?1019218 · Note