PT-2014-4688 · Oracle · Oracle Event Processing+1

Published 2014-04-16 · Updated 2014-07-24 · CVE-2014-2424

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0

Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via vectors related to the CEP system in the Oracle Event Processing component. This can potentially lead to remote code execution.

Recommendations For Oracle Fusion Middleware version 11.1.1.7.0, consider restricting access to the FileUploadServlet to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2014-2424

ZDI-14-106

Affected Products

Oracle Event Processing

Oracle Fusion Middleware

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle_event_processing_upload.rb · Exploit
• 🔥 http://exploit-db.com/exploits/33989 · Exploit
• 🔥 https://exploit-db.com/exploits/33989 · Exploit
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2424 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-106 · Security Note
• http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html · Note
• http://osvdb.org/105844 · Note
• http://securityfocus.com/bid/66871 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2424 · Note