Oracle April 2009 Critical Patch Update Multiple Vulnerabilities

Bugtraq ID:	34461
Class:	Unknown
CVE:	CVE-2009-0972 CVE-2009-0973 CVE-2009-0974 CVE-2009-0975 CVE-2009-0976 CVE-2009-0977 CVE-2009-0978 CVE-2009-0979 CVE-2009-0980 CVE-2009-0981 CVE-2009-0982 CVE-2009-0983 CVE-2009-0984 CVE-2009-0985 CVE-2009-0986 CVE-2009-0988 CVE-2009-0989 CVE-2009-0990 CVE-2009-0991 CVE-2009-0992 CVE-2009-0993 CVE-2009-0994 CVE-2009-0995 CVE-2009-0996 CVE-2009-0997 CVE-2009-0998 CVE-2009-0999 CVE-2009-1000 CVE-2009-1001 CVE-2009-1002 CVE-2009-1003 CVE-2009-1004 CVE-2009-1005 CVE-2009-1006 CVE-2009-1008 CVE-2009-1009 CVE-2009-1010 CVE-2009-1011 CVE-2009-1012 CVE-2009-1013 CVE-2009-1014 CVE-2009-1016 CVE-2009-1017 CVE-2009-0189 CVE-2009-0190
Remote:	Yes
Local:	Yes
Published:	Apr 09 2009 12:00AM
Updated:	Sep 01 2009 04:22PM
Credit:	Dyon Balding of Secunia Research, Joshua J. Drake of iDefense, Gerhard Eschelbeck of Qualys, Inc., Esteban Martinez Fayo of Application Security, Inc., Franz Huell of Red Database Security, Mike Janowski of Neohapsis, Inc., Joxean Koret, Joxean Koret of Ti
Vulnerable:	Oracle XML Publisher 10.1.3 .2.1 Oracle XML Publisher 5.6.2 Oracle XML Publisher 10.1.3.2 Oracle Weblogic Server 10.3 Oracle PeopleSoft Enterprise PeopleTools 8.49 Oracle PeopleSoft Enterprise HRMS 9.0 Oracle PeopleSoft Enterprise HRMS 8.9 Oracle Outside In SDK HTML Export 8.3 Oracle Outside In SDK HTML Export 8.2.2 Oracle Oracle9i Standard Edition 9.2 .8DV Oracle Oracle9i Standard Edition 9.2 .8 Oracle Oracle9i Personal Edition 9.2 .8DV Oracle Oracle9i Personal Edition 9.2 .8 Oracle Oracle9i Enterprise Edition 9.2 .8DV Oracle Oracle9i Enterprise Edition 9.2 .8.0 Oracle Oracle11g Standard Edition One 11.1 6 Oracle Oracle11g Standard Edition 11.1 6 Oracle Oracle11g Standard Edition 11.1 6 Oracle Oracle11g Enterprise Edition 11.1 6 Oracle Oracle11g Enterprise Edition 11.1.0.7 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.2.0.4 Oracle Oracle10g Application Server 10.1.2 Oracle Oracle10g Application Server 10.1.2.3.0 Oracle JRockit R27.6.2 Oracle JRockit R27.6.0 Oracle JRockit R27.1.0 Oracle E-Business Suite 11i 11.5.10.2 Oracle E-Business Suite 12.0.6 Oracle Data Service Integrator 10.3 Oracle BI Publisher 10.1.3 .4 Oracle BI Publisher 10.1.3 .3.3 Oracle BI Publisher 10.1.3 .3.2 Oracle BI Publisher 10.1.3 .3.1 Oracle BI Publisher 10.1.3 .3.0 Oracle Audit Vault 10.2.3 Oracle AquaLogic Data Services Platform 3.0.1 Oracle AquaLogic Data Services Platform 3.2 Oracle AquaLogic Data Services Platform 3.0 BEA Systems Weblogic Server 8.1 SP 6 BEA Systems Weblogic Server 8.1 SP 5 BEA Systems Weblogic Server 8.1 SP 4 BEA Systems Weblogic Server 8.1 SP 3 BEA Systems Weblogic Server 8.1 SP 2 BEA Systems Weblogic Server 8.1 SP 1 BEA Systems Weblogic Server 8.1 BEA Systems Weblogic Server 7.0 .0.1 SP 4 BEA Systems Weblogic Server 7.0 .0.1 SP 3 BEA Systems Weblogic Server 7.0 .0.1 SP 2 BEA Systems Weblogic Server 7.0 .0.1 SP 1 BEA Systems Weblogic Server 7.0 .0.1 BEA Systems Weblogic Server 7.0 SP 7 BEA Systems Weblogic Server 7.0 SP 6 BEA Systems Weblogic Server 7.0 SP 5 BEA Systems Weblogic Server 7.0 SP 4 BEA Systems Weblogic Server 7.0 SP 3 BEA Systems Weblogic Server 7.0 SP 2 BEA Systems Weblogic Server 7.0 SP 1 BEA Systems Weblogic Server 7.0 - HP HP-UX 11.0 - HP HP-UX 11i v1 - IBM AIX 4.3.3 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Redhat Linux 7.1 i386 - Redhat Linux 6.2 i386 - Sun Solaris 8_sparc - Sun Solaris 2.7_sparc - Sun Solaris 2.6_sparc BEA Systems Weblogic Server 9.2 Maintenance Pack BEA Systems Weblogic Server 9.2 BEA Systems Weblogic Server 9.1 BEA Systems Weblogic Server 9.0 BEA Systems Weblogic Server 7.0 SP7 BEA Systems Weblogic Server 10.3 BEA Systems Weblogic Server 10.3 BEA Systems Weblogic Server 10.0 MP1 BEA Systems Weblogic Server 10.0 BEA Systems Weblogic Server 10.0 BEA Systems WebLogic Portal 8.1 SP6 BEA Systems WebLogic Portal 8.1 SP5 BEA Systems WebLogic Portal 8.1 SP4 BEA Systems WebLogic Portal 8.1 SP3 BEA Systems WebLogic Portal 8.1 SP2 BEA Systems WebLogic Portal 8.1 SP1 BEA Systems WebLogic Portal 8.1
Not Vulnerable:

Oracle April 2009 Critical Patch Update Multiple Vulnerabilities

Oracle has released the April 2009 critical patch update that addresses 43 vulnerabilities affecting the following software:

Oracle Database
Oracle Audit Vault
Oracle Application Server
Oracle Outside In SDK HTML Export
Oracle XML Publisher
Oracle BI Publisher
Oracle E-Business Suite
PeopleSoft Enterprise PeopleTools
PeopleSoft Enterprise HRMS
Oracle WebLogic Server (formerly BEA WebLogic Server)
Oracle Data Service Integrator
Oracle AquaLogic Data Services Platform
Oracle JRockit

Oracle April 2009 Critical Patch Update Multiple Vulnerabilities

Some of these issues may not require specific exploit code and may be trivial to exploit.

The following proof of concept for CVE-2009-0991 is available:

• /data/vulnerabilities/exploits/CVE-2009-0991.py

Oracle April 2009 Critical Patch Update Multiple Vulnerabilities

Solution:
Vendor updates are available. Contact the vendor for more information.

Oracle April 2009 Critical Patch Update Multiple Vulnerabilities

References:

• Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow (Secunia)
  
• Oracle BEA WebLogic Server Plug-ins Integer Overflow (Secunia)
  
• Oracle Database SQL Injection vulnerability in LT.ROLLBACKWORKSPACE (Team SHATTER)
  
• Oracle Homepage (Oracle)
  
• CVE-2009-0991 PoC (Dennis Yurichev )
  
• Secunia Research: Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflo (Secunia Research )
  
• Secunia Research: Oracle BEA WebLogic Server Plug-ins Integer Overflow (Secunia Research )
  
• SQL Injection in package DBMS_AQADM_SYS ([email protected])
  
• SQL Injection in package DBMS_AQIN ([email protected])
  
• Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Da (Shatter )
  
• Unprivileged DB users can see APEX password hashes ([email protected])
  
• ZDI-09-017: Oracle Applications Server 10g Format String Vulnerability (ZDI Disclosures )
  
• Oracle Applications Server 10g Format String Vulnerability (ZDI)
  
• Oracle Critical Patch Update Advisory - April 2009 (Oracle)
  
• Oracle Critical Patch Update Pre-Release Announcement - April 2009 (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1001) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1002) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1003) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1004) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1005) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1006) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1012) (Oracle)
  
• SECURITY ADVISORY (CVE-2009-1016) (Oracle)
  
• SQL Injection in package DBMS_AQADM_SYS (Red-Database-Security)
  
• SQL Injection in package DBMS_AQIN (Red-Database-Security)
  
• Unprivileged DB users can see APEX password hashes in FLOWS_030000.WWV_FLOW_USER (Red-Database-Security)