Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
BID:36288
Info
Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 36288 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2009 12:00AM |
| Updated: | Sep 04 2009 10:21PM |
| Credit: | Intevydis |
| Vulnerable: |
Oracle TimesTen In-Memory Database 7.0.5 |
| Not Vulnerable: | |
Discussion
Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
Oracle TimesTen In-Memory is prone to multiple remote vulnerabilities, including:
- An unspecified information-disclosure vulnerability.
- An unspecified denial-of-service vulnerability.
- An unspecified security vulnerability.
Very few technical details are currently available. We will update this BID as more information emerges.
An attacker can leverage these issues to obtain sensitive information or crash the affected application. Other attacks are also possible.
Oracle TimesTen In-Memory 7.0.5 is vulnerable; other versions may also be affected.
Oracle TimesTen In-Memory is prone to multiple remote vulnerabilities, including:
- An unspecified information-disclosure vulnerability.
- An unspecified denial-of-service vulnerability.
- An unspecified security vulnerability.
Very few technical details are currently available. We will update this BID as more information emerges.
An attacker can leverage these issues to obtain sensitive information or crash the affected application. Other attacks are also possible.
Oracle TimesTen In-Memory 7.0.5 is vulnerable; other versions may also be affected.
Exploit / POC
Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Oracle TimesTen In-Memory Multiple Unspecified Vulnerabilities
References:
References:
- Oracle Homepage (Oracle)
- VulnDisco Pack Professional (Intevydis)