PT-2009-2705 · Oracle · Oracle Application Object Library+5

Published 2009-09-14 · Updated 2012-10-23 · CVE-2008-7238

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.0.3

Description The issue affects confidentiality and integrity, and is related to several components, including the Mobile Application Server, Oracle Applications Framework, CRM Technical Foundation, Oracle Application Object Library, and Oracle Applications Technology Stack. Local users and remote attackers, including remote authenticated users, can exploit the issue via unknown vectors.

Recommendations For Oracle E-Business Suite version 12.0.3, update to a version that includes fixes for the vulnerabilities in the Mobile Application Server, Oracle Applications Framework, CRM Technical Foundation, Oracle Application Object Library, and Oracle Applications Technology Stack components.

Exploit

Fix

Related Identifiers

CVE-2008-7238

Affected Products

Crm Technical Foundation

Mobile Application Server

Oracle Application Object Library

Oracle Applications Framework

Oracle Applications Technology Stack

Oracle E-Business Suite

References · 15

• 🔥 http://securityfocus.com/bid/27229 · Exploit
• http://secunia.com/advisories/28518 · Vendor Advisory
• http://secunia.com/advisories/28556 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0150 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0180 · Patch
• http://us-cert.gov/cas/techalerts/TA08-017A.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-7238 · Security Note
• http://marc.info/?l=bugtraq&m=120058413923005&w=2 · Vendor Advisory
• http://securitytracker.com/id?1019218 · Patch
• http://osvdb.org/40286 · Note
• http://osvdb.org/40284 · Note
• http://osvdb.org/40288 · Note
• http://osvdb.org/40289 · Note
• http://osvdb.org/40290 · Note
• http://oracle.com/technetwork/topics/security/cpujan2008-086860.html · Note