PT-2015-3054 · Oracle · Oracle Communications Diameter Signaling Router+3

Published 2015-10-21 · Updated 2016-12-24 · CVE-2015-2608

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Communications Diameter Signaling Router (DSR) versions 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier Oracle Communications Performance Intelligence Center Software versions 9.0.3 and earlier and 10.1.5 and earlier Oracle Communications Policy Management versions 9.9.0 and earlier, 10.5.0 and earlier, 11.5.0 and earlier, and 12.1.0 and earlier Oracle Communications Tekelec HLR Router version 4.0.0

Description The issue is related to an unspecified vulnerability in the Oracle Communications Applications, which can be exploited by remote attackers to affect confidentiality, integrity, and availability. The vulnerability is associated with errors in the code and can be exploited via vectors related to PMAC, allowing an attacker to influence the integrity, availability, and confidentiality of information.

Recommendations For Oracle Communications Diameter Signaling Router (DSR) versions 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier, update to a version later than the specified versions to resolve the issue. For Oracle Communications Performance Intelligence Center Software versions 9.0.3 and earlier and 10.1.5 and earlier, update to a version later than the specified versions to resolve the issue. For Oracle Communications Policy Management versions 9.9.0 and earlier, 10.5.0 and earlier, 11.5.0 and earlier, and 12.1.0 and earlier, update to a version later than the specified versions to resolve the issue. For Oracle Communications Tekelec HLR Router version 4.0.0, update to a version later than 4.0.0 to resolve the issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00259

CVE-2015-2608

Affected Products

Oracle Communications Diameter Signaling Router

Communications Performance Intelligence Center

Oracle Communications Policy Management

Oracle Communications Tekelec Hlr Router

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2608 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00259 · Security Note
• http://securitytracker.com/id/1033900 · Note
• http://oracle.com/technetwork/topics/security/alerts-086861.html · Note