Oracle Convergence CVE-2010-0893 Unspecified Remote Vulnerability

Bugtraq ID:	39446
Class:	Unknown
CVE:	CVE-2010-0893
Remote:	Yes
Local:	No
Published:	Apr 13 2010 12:00AM
Updated:	Apr 13 2010 12:00AM
Credit:	Oracle
Vulnerable:	Sun Convergence 0
Not Vulnerable:

Oracle Convergence CVE-2010-0893 Unspecified Remote Vulnerability

Oracle Convergence is prone to an unspecified remote vulnerability

The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'Mail' privileges.

This vulnerability affects the following supported versions:
1.0

Oracle Convergence CVE-2010-0893 Unspecified Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Convergence CVE-2010-0893 Unspecified Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.


Sun Convergence 0

• Oracle 137631-12
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -137631-12-1


• Oracle 137632-12
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-2 1-137632-12-1-1


• Oracle 137633-12
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -137633-12-1

Oracle Convergence CVE-2010-0893 Unspecified Remote Vulnerability

References:

• Oracle Critical Patch Update April 2010 (Oracle)
  
• This Alert Covers CVE-2010-0893 for the Mail Component of the Sun Convergence Pr (Oracle)