RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
BID:41482
Info
RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
| Bugtraq ID: | 41482 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 08 2010 12:00AM |
| Updated: | Jul 15 2010 06:36PM |
| Credit: | Oracle |
| Vulnerable: |
Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_137 Sun OpenSolaris build snv_136 Sun OpenSolaris build snv_135 Sun OpenSolaris build snv_134a Sun OpenSolaris build snv_134 Sun OpenSolaris build snv_133 Sun OpenSolaris build snv_132 Sun OpenSolaris build snv_131 Sun OpenSolaris build snv_130 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_129 Sun OpenSolaris build snv_128 Sun OpenSolaris build snv_127 Sun OpenSolaris build snv_126 Sun OpenSolaris build snv_125 Sun OpenSolaris build snv_124 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris 0 Sun Java System Web Proxy Server 4.0.13 Sun Java System Web Proxy Server 4.0.12 Sun Java System Web Proxy Server 4.0.5 Sun Java System Web Proxy Server 4.0 Sun Java System Application Server Standard Platform 8.1 2005 Q1 Sun Java System Application Server Standard Edition 8.2 Sun Java System Application Server Standard 7.0.0 2004Q2 R5 Sun Java System Application Server Standard 7.0.0 2004Q2 R4 Sun Java System Application Server Platform Edition 8.1 2005 Q1 UR1 Sun Java System Application Server Platform Edition 8.1 2005 Q1 Sun Java System Application Server Platform Edition 9.1 Sun Java System Application Server Platform Edition 9.0 Update 1 Sun Java System Application Server Platform Edition 9.0 Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Platform Edition 8.1 Sun Java System Application Server Enterprise Edition 8.1 2005Q1RHEL2.1/RHEL3 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.1 Sun Java System Application Server Enterprise 7.0.0 2004Q2 R5 Sun Java System Application Server Enterprise 7.0.0 2004Q2 R4 Sun Java System Application Server 8.0 Platform Edition Sun Java System Application Server 7.1 Sun Java System Application Server 7.0 UR7 Standard Edition Sun Java System Application Server 7.0 UR7 Platform Edition Sun Java System Application Server 7.0 UR6 Standard Edition Sun Java System Application Server 7.0 UR6 Platform Edition Sun Java System Application Server 7.0 UR5 Standard Edition Sun Java System Application Server 7.0 UR5 Platform Edition Sun Java System Application Server 7.0 UR4 Sun Java System Application Server 7.0 2004Q2 R3 Standard Sun Java System Application Server 7.0 2004Q2 R3 Enterprise Sun Java System Application Server 7.0 2004Q2 R2 Standard Sun Java System Application Server 7.0 2004Q2 R2 Enterprise Sun Java System Application Server 7.0 2004Q2 R1Standard Sun Java System Application Server 7.0 2004Q2 R1Enterprise Sun Java System Application Server 7.0 Standard Edition Sun Java System Application Server 7.0 Platform Edition Sun Java System Application Server 7.0 Enterprise Edition Sun Java System Application Server 7.0 2004Q2 Sun Java System Application Server 9.0_0.1 Sun Java System Application Server 8.2 Sun Java System Application Server 8.1 Sun Java System Application Server 8.0 Sun Java System Application Server 7 2004Q2 Sun Glassfish Enterprise Server 2.1.1 Sun Glassfish Enterprise Server 2.1 Sun Convergence 1.0 Sun Convergence 0 Oracle Weblogic Server 10.3.3 Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 10.3.1 Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.2 MP2 Oracle Weblogic Server 9.2 MP1 Oracle Weblogic Server 9.2 Oracle Weblogic Server 9.1 GA Oracle Weblogic Server 9.1 Oracle Weblogic Server 9.0 GA Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 8.1 MP6 Oracle Weblogic Server 8.1 MP4 Oracle Weblogic Server 8.1 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 7.0 MP5 Oracle Weblogic Server 7.0 MP4 Oracle Weblogic Server 7.0 MP2 Oracle Weblogic Server 7.0 Oracle Weblogic Server 10.3 Oracle Weblogic Server 10.0 MP2 Oracle Weblogic Server 10.0 MP1 Oracle Weblogic Server 10 Oracle Transportation Manager 6.0.3 Oracle Transportation Manager 5.5.06.00 Oracle Transportation Manager 5.5.05.07 Oracle TimesTen In-Memory Database 7.0.5.4.0 Oracle TimesTen In-Memory Database 7.0.5.3.0 Oracle TimesTen In-Memory Database 7.0.5.2.0 Oracle TimesTen In-Memory Database 7.0.5.1.0 Oracle Secure Backup 10.3.0.1.0 Oracle PeopleSoft Enterprise PeopleTools 8.50.7 Oracle PeopleSoft Enterprise PeopleTools 8.49.26 Oracle PeopleSoft Enterprise PeopleTools 8.49.23 Oracle PeopleSoft Enterprise PeopleTools 8.49.21 Oracle PeopleSoft Enterprise PeopleTools 8.49.14 Oracle PeopleSoft Enterprise PeopleTools 8.49.12 Oracle PeopleSoft Enterprise PeopleTools 8.49.9 Oracle PeopleSoft Enterprise PeopleTools 8.50 Oracle PeopleSoft Enterprise PeopleTools 8.49 Oracle PeopleSoft Enterprise Human Capital Management 9.1 Oracle PeopleSoft Enterprise Human Capital Management 9.0 Bundle 10 Oracle PeopleSoft Enterprise Human Capital Management 9.0 Oracle PeopleSoft Enterprise Human Capital Management 8.9 Bundle 21 Oracle PeopleSoft Enterprise Human Capital Management 8.9 Oracle PeopleSoft Enterprise FSCM 9.1 Oracle PeopleSoft Enterprise FSCM 9.0 Oracle PeopleSoft Enterprise FSCM 8.9 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.1 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.0 Oracle PeopleSoft Enterprise Campus Solutions 9.0 Oracle Oracle9i Standard Edition 9.2 .8DV Oracle Oracle9i Standard Edition 9.2 .8 Oracle Oracle9i Personal Edition 9.2 .8DV Oracle Oracle9i Personal Edition 9.2 .8 r2 Oracle Oracle9i Personal Edition 9.2 .8 dv r2 Oracle Oracle9i Personal Edition 9.2 .8 dv Oracle Oracle9i Personal Edition 9.2 .8 Oracle Oracle9i Enterprise Edition 9.2 .8DV Oracle Oracle9i Enterprise Edition 9.2 .8.0 Oracle Oracle11g Standard Edition 11.1 6 Oracle Oracle11g Standard Edition 11.1 .7 Oracle Oracle11g Standard Edition 11.2.0.1.0 Oracle Oracle11g Enterprise Edition 11.1 6 Oracle Oracle11g Enterprise Edition 11.2.0.1.0 Oracle Oracle11g Enterprise Edition 11.1.0.7 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.1 .5 r1 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 10.2.0.4 Oracle JRockit R28.0.0 Oracle JRockit R27.6.6 Oracle JRockit R27.6.5 Oracle JRockit R27.6.4 Oracle JRockit R27.6.3 Oracle JRockit R27.6.2 Oracle JRockit R27.6.0-50 1.5.0 15 Oracle JRockit R27.6.0 Oracle Identity Management 10.1.4.0.1 Oracle Enterprise Manager Grid Control 10g 10.1 6 Oracle Enterprise Manager Grid Control 10g 10.1 .5 Oracle Enterprise Manager Grid Control 10g 10.1 .4 Oracle Enterprise Manager Grid Control 10g 10.1 .3 Oracle Enterprise Manager Grid Control 10g 10.1 .0.2 Oracle E-Business Suite 12 12.1.2 Oracle E-Business Suite 12 12.1.1 Oracle E-Business Suite 12 12.0.5 Oracle E-Business Suite 12 12.0.4 Oracle E-Business Suite 11i 11.5.10 Oracle E-Business Suite 11i 11.5.10.2 Oracle E-Business Suite 12.0.6 Oracle Business Process Management 10.3.2 Oracle Business Process Management 10.3.1 Oracle Business Process Management 6.0.5 Oracle Business Process Management 5.7.3 Oracle Application Server 10.1.2.3 |
| Not Vulnerable: | |
Discussion
RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
Oracle has released advance notification regarding the July 2010 critical patch update to be released on July 13, 2010. The update addresses 59 vulnerabilities affecting the following software:
Oracle Database
Oracle TimeTen In-Memory Database
Oracle Secure Backup
Oracle Application Server
Oracle Identity Management
Oracle WebLogic Server
Oracle JRockit
Oracle Business Process Management
Oracle Enterprise Manager Grid Control
Oracle E-Business Suite
Oracle Transportation Manager
PeopleSoft Enterprise
Oracle Sun Products
This BID is being retired. The following individual records exist to better document these issues:
31289 Multiple Vendor FTP Server Long Command Handling Security Vulnerability
35671 IETF and W3C XML Digital Signature Specification HMAC Truncation Authentication Bypass Vulnerability
36935 Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
39062 Oracle Java Runtime Environment 'JPEGImageEncoderImpl' Remote Heap Buffer Overflow Vulnerability
39065 Oracle Java SE and Java for Business JRE Trusted Method Chaining Remote Code Execution Vulnerability
39067 Oracle Java SE and Java for Business ImageIO 'JPEGImageReader' Remote Code Execution Vulnerability
39068 Oracle Java SE and Java for Business CVE-2010-0087 Remote Vulnerability
39069 Oracle Java SE and Java for Business 'readMabCurveData()' Remote Stack Buffer Overflow Vulnerability
39070 Oracle Java SE and Java for Business CVE-2010-0839 Remote Sound Vulnerability
39071 Oracle Java SE and Java for Business CVE-2010-0847 Remote Java 2D Vulnerability
39072 Oracle Java SE and Java for Business CVE-2010-0837 Remote Vulnerability
39073 Oracle Java SE and Java for Business CVE-2010-0849 Remote Java 2D Vulnerability
39075 Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability
39077 Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
39078 Oracle Java SE and Java for Business CVE-2010-0848 Remote Java 2D Vulnerability
39081 Oracle Java SE and Java for Business CVE-2010-0088 Remote Java Runtime Environme Vulnerability
39083 Oracle Java SE and Java for Business 'XNewPtr()' Remote Code Execution Vulnerability
39086 Oracle Java SE and Java for Business CVE-2010-0095 Remote Java Runtime Environment Vulnerability
39093 Oracle Java SE and Java for Business CVE-2010-0084 Remote Vulnerability
39094 Oracle Java SE and Java for Business CVE-2010-0085 Remote Java Runtime Environment Vulnerability
39096 Oracle Java SE and Java for Business CVE-2010-0091 Remote Java Runtime Environment Vulnerability
41595 Oracle TimesTen In-Memory Database CVE-2010-0873 Remote Data Server Vulnerability
41596 Oracle Secure Backup CVE-2010-0907 Unspecified Remote Vulnerability
41597 Oracle Secure Backup CVE-2010-0906 Remote Vulnerability
41598 Multiple Vendor ToolTalk Heap Overflow Remote Code Execution Vulnerability
41599 Oracle TimesTen In-Memory Database CVE-2010-0910 Remote Data Server Vulnerability
41600 Oracle Enterprise Manager Grid Control 10g CVE-2010-2373 Remote Console Vulnerability
41601 Oracle OpenSSO CVE-2009-3764 Unspecified Remote Vulnerability
41602 Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability
41603 Oracle OpenSSO Enterprise CVE-2009-3762 Unspecified Remote Vulnerability
41604 Oracle E-Business Suite CVE-2010-0912 Remote Oracle Applications Framework Vulnerability
41605 Oracle E-Business Suite CVE-2010-0908 Remote Oracle Applications Framework Vulnerability
41606 Oracle Solaris CVE-2010-2393 Unspecified Local Vulnerability
41607 Oracle Solaris CVE-2010-2386 GigaSwift Ethernet Driver Local Vulnerability
41608 Oracle Secure Backup CVE-2010-0904 Remote Oracle Secure Backup Vulnerability
41609 Oracle Fusion Middleware CVE-2010-0081 Remote Application Server Control Vulnerability
41610 Oracle E-Business Suite CVE-2010-0915 Remote Oracle Advanced Product Catalog Vulnerability
41611 Oracle Solaris CVE-2010-2376 Unspecified Local Vulnerability
41612 Oracle Solaris CVE-2010-0916 'rdist' Local Vulnerability
41613 Oracle Solaris CVE-2010-2394 TCP/IP Local Vulnerability
41614 Oracle E-Business Suite CVE-2010-0905 Remote Oracle Applications Manager Vulnerability
41615 Oracle Fusion Middleware CVE-2010-0835 Remote Wireless Vulnerability
41616 Oracle CVE-2010-0899 Remote Secure Backup Vulnerability
41617 Oracle Business Process Management CVE-2010-2370 Remote Vulnerability
41618 Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability
41619 Oracle Solaris CVE-2010-2382 Remote Solaris Vulnerability
41620 Oracle WebLogic Server Encoded URL Remote Vulnerability
41621 Oracle Application Express CVE-2010-0892 Remote Vulnerability
41622 Oracle E-Business Suite CVE-2010-0836 Remote Oracle Knowledge Management Vulnerability
41623 Oracle Solaris CVE-2010-2399 Kernel/VM Local Vulnerability
41624 Oracle CVE-2010-0911 Remote Listener Vulnerability
41625 Oracle E-Business Suite CVE-2010-0909 Remote Oracle Applications Framework Vulnerability
41626 Oracle Application Server Control CVE-2010-2381 Remote Vulnerability
41627 Oracle Solaris CVE-2010-2392 Local ZFS Vulnerability
41628 Oracle E-Business Suite CVE-2010-0913 Remote Oracle Applications Manager Vulnerability
41629 Oracle Solaris CVE-2010-2400 Kernel/Filesystem Local Vulnerability
41630 Oracle Sun Convergence CVE-2010-0914 Remote Vulnerability
41631 Oracle Transportation Manager CVE-2010-2372 Remote Vulnerability
41632 Oracle Network Layer CVE-2010-0900 Remote Vulnerability
41633 Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability
41634 Oracle Solaris Studio CVE-2010-2374 Local Vulnerability
41635 Oracle CVE-2010-0901 Remote Export Vulnerability
41636 Oracle Transportation Manager CVE-2010-2371 Unspecified Local Vulnerability
41637 Oracle Solaris CVE-2010-2383 NFS Local Vulnerability
41638 Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability
41639 Oracle Database Server CVE-2010-0903 Remote Net Foundation Layer Vulnerability
41640 Oracle PeopleSoft Enterprise HCM CVE-2010-2379 Time & Labor Remote Vulnerability
41641 Oracle PeopleSoft Enterprise FSCM CVE-2010-2380 Unspecified Local Vulnerability
41642 Oracle Solaris CVE-2010-2384 Solaris Management Console Local Vulnerability
41643 Oracle Database Server CVE-2010-0902 Remote Oracle OLAP Vulnerability
41644 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-2377 Remote Vulnerability
41645 Oracle PeopleSoft Enterprise HCM CVE-2010-2401 Remote eProfile Manager Vulnerability
41646 Oracle PeopleSoft Enterprise CRM CVE-2010-2378 Local Vulnerability
41647 Oracle PeopleSoft Enterprise Campus Solutions CVE-2010-2403 Remote Vulnerability
41648 Oracle PeopleSoft Enterprise Human Capital Management CVE-2010-2398 Remote Vulnerability
41708 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-2402 Remote Vulnerability
Oracle has released advance notification regarding the July 2010 critical patch update to be released on July 13, 2010. The update addresses 59 vulnerabilities affecting the following software:
Oracle Database
Oracle TimeTen In-Memory Database
Oracle Secure Backup
Oracle Application Server
Oracle Identity Management
Oracle WebLogic Server
Oracle JRockit
Oracle Business Process Management
Oracle Enterprise Manager Grid Control
Oracle E-Business Suite
Oracle Transportation Manager
PeopleSoft Enterprise
Oracle Sun Products
This BID is being retired. The following individual records exist to better document these issues:
31289 Multiple Vendor FTP Server Long Command Handling Security Vulnerability
35671 IETF and W3C XML Digital Signature Specification HMAC Truncation Authentication Bypass Vulnerability
36935 Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
39062 Oracle Java Runtime Environment 'JPEGImageEncoderImpl' Remote Heap Buffer Overflow Vulnerability
39065 Oracle Java SE and Java for Business JRE Trusted Method Chaining Remote Code Execution Vulnerability
39067 Oracle Java SE and Java for Business ImageIO 'JPEGImageReader' Remote Code Execution Vulnerability
39068 Oracle Java SE and Java for Business CVE-2010-0087 Remote Vulnerability
39069 Oracle Java SE and Java for Business 'readMabCurveData()' Remote Stack Buffer Overflow Vulnerability
39070 Oracle Java SE and Java for Business CVE-2010-0839 Remote Sound Vulnerability
39071 Oracle Java SE and Java for Business CVE-2010-0847 Remote Java 2D Vulnerability
39072 Oracle Java SE and Java for Business CVE-2010-0837 Remote Vulnerability
39073 Oracle Java SE and Java for Business CVE-2010-0849 Remote Java 2D Vulnerability
39075 Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability
39077 Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
39078 Oracle Java SE and Java for Business CVE-2010-0848 Remote Java 2D Vulnerability
39081 Oracle Java SE and Java for Business CVE-2010-0088 Remote Java Runtime Environme Vulnerability
39083 Oracle Java SE and Java for Business 'XNewPtr()' Remote Code Execution Vulnerability
39086 Oracle Java SE and Java for Business CVE-2010-0095 Remote Java Runtime Environment Vulnerability
39093 Oracle Java SE and Java for Business CVE-2010-0084 Remote Vulnerability
39094 Oracle Java SE and Java for Business CVE-2010-0085 Remote Java Runtime Environment Vulnerability
39096 Oracle Java SE and Java for Business CVE-2010-0091 Remote Java Runtime Environment Vulnerability
41595 Oracle TimesTen In-Memory Database CVE-2010-0873 Remote Data Server Vulnerability
41596 Oracle Secure Backup CVE-2010-0907 Unspecified Remote Vulnerability
41597 Oracle Secure Backup CVE-2010-0906 Remote Vulnerability
41598 Multiple Vendor ToolTalk Heap Overflow Remote Code Execution Vulnerability
41599 Oracle TimesTen In-Memory Database CVE-2010-0910 Remote Data Server Vulnerability
41600 Oracle Enterprise Manager Grid Control 10g CVE-2010-2373 Remote Console Vulnerability
41601 Oracle OpenSSO CVE-2009-3764 Unspecified Remote Vulnerability
41602 Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability
41603 Oracle OpenSSO Enterprise CVE-2009-3762 Unspecified Remote Vulnerability
41604 Oracle E-Business Suite CVE-2010-0912 Remote Oracle Applications Framework Vulnerability
41605 Oracle E-Business Suite CVE-2010-0908 Remote Oracle Applications Framework Vulnerability
41606 Oracle Solaris CVE-2010-2393 Unspecified Local Vulnerability
41607 Oracle Solaris CVE-2010-2386 GigaSwift Ethernet Driver Local Vulnerability
41608 Oracle Secure Backup CVE-2010-0904 Remote Oracle Secure Backup Vulnerability
41609 Oracle Fusion Middleware CVE-2010-0081 Remote Application Server Control Vulnerability
41610 Oracle E-Business Suite CVE-2010-0915 Remote Oracle Advanced Product Catalog Vulnerability
41611 Oracle Solaris CVE-2010-2376 Unspecified Local Vulnerability
41612 Oracle Solaris CVE-2010-0916 'rdist' Local Vulnerability
41613 Oracle Solaris CVE-2010-2394 TCP/IP Local Vulnerability
41614 Oracle E-Business Suite CVE-2010-0905 Remote Oracle Applications Manager Vulnerability
41615 Oracle Fusion Middleware CVE-2010-0835 Remote Wireless Vulnerability
41616 Oracle CVE-2010-0899 Remote Secure Backup Vulnerability
41617 Oracle Business Process Management CVE-2010-2370 Remote Vulnerability
41618 Oracle Sun Java System Web Proxy Server CVE-2010-2385 Administration Server Remote Vulnerability
41619 Oracle Solaris CVE-2010-2382 Remote Solaris Vulnerability
41620 Oracle WebLogic Server Encoded URL Remote Vulnerability
41621 Oracle Application Express CVE-2010-0892 Remote Vulnerability
41622 Oracle E-Business Suite CVE-2010-0836 Remote Oracle Knowledge Management Vulnerability
41623 Oracle Solaris CVE-2010-2399 Kernel/VM Local Vulnerability
41624 Oracle CVE-2010-0911 Remote Listener Vulnerability
41625 Oracle E-Business Suite CVE-2010-0909 Remote Oracle Applications Framework Vulnerability
41626 Oracle Application Server Control CVE-2010-2381 Remote Vulnerability
41627 Oracle Solaris CVE-2010-2392 Local ZFS Vulnerability
41628 Oracle E-Business Suite CVE-2010-0913 Remote Oracle Applications Manager Vulnerability
41629 Oracle Solaris CVE-2010-2400 Kernel/Filesystem Local Vulnerability
41630 Oracle Sun Convergence CVE-2010-0914 Remote Vulnerability
41631 Oracle Transportation Manager CVE-2010-2372 Remote Vulnerability
41632 Oracle Network Layer CVE-2010-0900 Remote Vulnerability
41633 Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability
41634 Oracle Solaris Studio CVE-2010-2374 Local Vulnerability
41635 Oracle CVE-2010-0901 Remote Export Vulnerability
41636 Oracle Transportation Manager CVE-2010-2371 Unspecified Local Vulnerability
41637 Oracle Solaris CVE-2010-2383 NFS Local Vulnerability
41638 Oracle Sun Multiple Application Servers CVE-2010-2397 Local Vulnerability
41639 Oracle Database Server CVE-2010-0903 Remote Net Foundation Layer Vulnerability
41640 Oracle PeopleSoft Enterprise HCM CVE-2010-2379 Time & Labor Remote Vulnerability
41641 Oracle PeopleSoft Enterprise FSCM CVE-2010-2380 Unspecified Local Vulnerability
41642 Oracle Solaris CVE-2010-2384 Solaris Management Console Local Vulnerability
41643 Oracle Database Server CVE-2010-0902 Remote Oracle OLAP Vulnerability
41644 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-2377 Remote Vulnerability
41645 Oracle PeopleSoft Enterprise HCM CVE-2010-2401 Remote eProfile Manager Vulnerability
41646 Oracle PeopleSoft Enterprise CRM CVE-2010-2378 Local Vulnerability
41647 Oracle PeopleSoft Enterprise Campus Solutions CVE-2010-2403 Remote Vulnerability
41648 Oracle PeopleSoft Enterprise Human Capital Management CVE-2010-2398 Remote Vulnerability
41708 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-2402 Remote Vulnerability
Exploit / POC
RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
Solution:
The vendor plans to release updates to address these issues on July 13, 2010.
Solution:
The vendor plans to release updates to address these issues on July 13, 2010.
References
RETIRED: Oracle July 2010 Critical Patch Update Multiple Vulnerabilities
References:
References: