RETIRED: Oracle April Critical Patch Update Advance Notification Vulnerability

Bugtraq ID:	23403
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Apr 10 2007 12:00AM
Updated:	Apr 18 2007 05:21PM
Credit:	These issues were reported by Oracle. It is not known who originally discovered them.
Vulnerable:	Oracle Secure Enterprise Search 10g Release 1 10.1.8 Oracle PeopleSoft Enterprise PeopleTools 8.48 Oracle PeopleSoft Enterprise PeopleTools 8.47 Oracle PeopleSoft Enterprise PeopleTools 8.22 Oracle PeopleSoft Enterprise Human Capital Management 8.9 Oracle Oracle9i Standard Edition 9.2 .8 Oracle Oracle9i Standard Edition 9.2 .7 Oracle Oracle9i Standard Edition 9.2 .0.5 Oracle Oracle9i Standard Edition 9.0.1 .5 FIPS Oracle Oracle9i Standard Edition 9.0.1 .5 Oracle Oracle9i Personal Edition 9.2 .8 Oracle Oracle9i Personal Edition 9.2 .7 Oracle Oracle9i Personal Edition 9.2 .0.5 Oracle Oracle9i Personal Edition 9.0.1 .5 FIPS Oracle Oracle9i Personal Edition 9.0.1 .5 Oracle Oracle9i Enterprise Edition 9.2 .8.0 Oracle Oracle9i Enterprise Edition 9.2 .7.0 Oracle Oracle9i Enterprise Edition 9.2 .0.5 Oracle Oracle9i Enterprise Edition 9.0.1 .5 FIPS Oracle Oracle9i Enterprise Edition 9.0.1 .5 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.2 .2 Oracle Oracle10g Standard Edition 10.2 .1 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Standard Edition 10.1 .0.4 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.2 .2 Oracle Oracle10g Personal Edition 10.2 .1 Oracle Oracle10g Personal Edition 10.1 .0.4 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.2 .2 Oracle Oracle10g Enterprise Edition 10.2 .1 Oracle Oracle10g Enterprise Edition 10.1 .0.4 Oracle Oracle10g Application Server 10.1.3 .2.0 Oracle Oracle10g Application Server 10.1.3 .1.0 Oracle Oracle10g Application Server 10.1.3 .0.0 Oracle Oracle10g Application Server 10.1.2 .2.0 Oracle Oracle10g Application Server 10.1.2 .1.0 Oracle Oracle10g Application Server 10.1.2 .0.2 Oracle Oracle10g Application Server 10.1.2 .0.1 Oracle Oracle10g Application Server 9.0.4 3 Oracle JD Edwards OneWorld Tools SP23 Oracle JD Edwards EnterpriseOne 8.96 Oracle Enterprise Manager 9i Release 2 9.2 8 Oracle Enterprise Manager 9i Release 2 9.2 7 Oracle Enterprise Manager 9i 9.0.1 5 Oracle E-Business Suite 12 12.0 Oracle E-Business Suite 11i 11.5.10 CU2 Oracle E-Business Suite 11i 11.5.10 Oracle E-Business Suite 11i 11.5.9 Oracle E-Business Suite 11i 11.5.8 Oracle E-Business Suite 11i 11.5.7 Oracle Collaboration Suite Release 1 10.1.2
Not Vulnerable:

RETIRED: Oracle April Critical Patch Update Advance Notification Vulnerability

Oracle has released advance notification of their April Critical Patch Update that will address 37 vulnerabilities affecting Oracle Database, Oracle Application Server, Oracle Collaboration Suite, Oracle E-Business Suite and Applications, Oracle Enterprise Manager, and Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne.

Oracle will be releasing its April quarterly Critical Patch Update on April 17, 2007.

These issues are documented in BID 23532 (Oracle April 2007 Security Update Multiple Vulnerabilities).

RETIRED: Oracle April Critical Patch Update Advance Notification Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

RETIRED: Oracle April Critical Patch Update Advance Notification Vulnerability

Solution:
Oracle will be releasing patches to address these issues on April 17, 2007. Please refer to the Oracle Critical Patch Update Pre-Release Announcment reference for details.

RETIRED: Oracle April Critical Patch Update Advance Notification Vulnerability

References:

• Oracle Critical Patch Update Pre-Release Announcement - April 2007 (Oracle)