Vulnerabilities / Threats
7/13/2010
12:30 PM
50%
50%

Oracle Patches 59 Vulnerabilities

Sun Solaris product suite, Oracle Database Server, Fusion Middleware, and Supply Chain Products Suite vulnerable to remote exploitation, with no authentication required.

Oracle is set to patch 59 vulnerabilities in its products Tuesday as part of its quarterly Critical Patch Update program. Of those vulnerabilities, 21 are in the Solaris product suite.

"Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible," the company said in a statement.

The patch update contains 13 new security fixes for the Oracle Database Server, patching eight different Oracle Database components: Application Express, Export, Listener, Net Foundation Layer, Network Layer, Oracle OLAP, Oracle Secure Backup, and TimesTen In-Memory Database.

Six of the fixes are for Oracle Database Server itself, and four of those vulnerabilities can be remotely exploitable without authentication -- as in, no username or password would be required. Two of the fixes are for the TimesTen In-Memory Database, and can also be exploited remotely, without authentication. Finally, there are five security fixes for Oracle Secure Backup, three of which are remotely exploitable without authentication.

In terms of severity, the vulnerabilities affecting the TimesTen In-Memory Database and Oracle Secure Backup rate a "10" -- the highest possible severity rating -- on Oracle's interpretation of version 2.0 of the common vulnerability scoring system (CVSS), an open standard for rating software vulnerabilities. CVSS takes into account the preconditions required for exploiting a vulnerability, the ease of exploitation, and the impact of a successful attack, using a formula to convert the vulnerability threat into a numeric score between 0 and 10, to help IT managers know which threats to remediate first.

For the Oracle Solaris Products Suite, seven of the 21 vulnerabilities could be remotely exploitable without authentication. The same goes for five of the seven vulnerabilities patched in Oracle Fusion Middleware and for one critical vulnerability in Oracle Enterprise Manager.

For Oracle applications, the Critical Patch Update includes seven new security fixes for Oracle E-Business Suite; five can be remotely exploitable without authentication. Oracle Supply Chain Products Suite gets two fixes, one exploitable remotely without authentication. Finally, the Oracle PeopleSoft and JDEdwards Suite gets eight patches, none of which can be remotely exploitable without authentication.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-2184
Published: 2015-03-27
Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

CVE-2014-3619
Published: 2015-03-27
The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

CVE-2014-8121
Published: 2015-03-27
DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up while the database is iterated over...

CVE-2014-9712
Published: 2015-03-27
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allows remote administrators to read arbitrary files and obtain passwords via a crafted path.

CVE-2015-0658
Published: 2015-03-27
The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

Dark Reading Radio
Archived Dark Reading Radio
Good hackers--aka security researchers--are worried about the possible legal and professional ramifications of President Obama's new proposed crackdown on cyber criminals.