RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
BID:45804
Info
RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
| Bugtraq ID: | 45804 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 13 2011 12:00AM |
| Updated: | Jan 19 2011 03:31PM |
| Credit: | Oracle |
| Vulnerable: |
Sun StarSuite 9.0 Update 3 Sun StarSuite 9 Sun StarSuite 8.0 Update 14 Sun StarSuite 8.0 Update 13 Sun StarSuite 8 Update 7 Sun StarSuite 8 Update 6 Sun StarSuite 8 Update 12 Sun StarSuite 8 Update 11 Sun StarSuite 8 Sun StarSuite 7.0 PP10 Sun StarSuite 7 PP9 Sun StarSuite 7 PP14 Sun StarSuite 7 PP13 Sun StarSuite 7 Sun StarSuite 6.0 PP7 Sun StarSuite 6 PP6 Sun StarSuite 6 Sun StarOffice 7.0 Sun StarOffice 5.2 Sun StarOffice 5.1 Sun StarOffice 9.0 Update 3 Sun StarOffice 9.0 Sun StarOffice 8.0 Update 14 Sun StarOffice 8.0 Update 13 Sun StarOffice 8.0 Update 12 Sun StarOffice 8.0 Update 11 Sun StarOffice 8.0 Sun StarOffice 8 Update 7 Sun StarOffice 8 Update 6 Sun StarOffice 7.0 PP9 Sun StarOffice 7.0 PP10 Sun StarOffice 7 PP14 Sun StarOffice 7 PP13 Sun StarOffice 6.0 PP7 Sun StarOffice 6.0 PP6 Sun StarOffice 6.0 Sun Solaris 11 Express Sun Solaris 11 Sun Solaris 11 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris svn_126 Sun OpenSolaris snv_111b Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_151a Sun OpenSolaris build snv_137 Sun OpenSolaris build snv_136 Sun OpenSolaris build snv_135 Sun OpenSolaris build snv_134a Sun OpenSolaris build snv_134 Sun OpenSolaris build snv_133 Sun OpenSolaris build snv_132 Sun OpenSolaris build snv_131 Sun OpenSolaris build snv_130 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_129 Sun OpenSolaris build snv_128 Sun OpenSolaris build snv_127 Sun OpenSolaris build snv_126 Sun OpenSolaris build snv_125 Sun OpenSolaris build snv_124 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris Build Snv 111B Sun Management Center 3.6.1 Sun Management Center 4.0 Sun Management Center 3.6 Sun Java System Portal Server 6.3.1 Sun Java System Portal Server 7.2 Sun Java System Portal Server 7.1 Sun Java System Portal Server 7.0 Sun Java System Portal Server 7 Sun Java System Communications Express 6.3 Sun Java System Communications Express 2005Q4 Sun Java System Communications Express 2005Q1 Sun Java System Communications Express 2004Q2 Sun Java System Communications Express 0 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.1 HP-UX Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 7.0 2005Q4 HP-UX Sun Java System Access Manager 6.3 2005Q1 x86 Sun Java System Access Manager 6.3 2005Q1 SPARC Sun Java System Access Manager 6.3 2005Q1 Linux Sun Java System Access Manager 6.2 2004Q2 Solaris x Sun Java System Access Manager 6.2 2004Q2 Solaris S Sun Java System Access Manager 6.2 2004Q2 Linux Sun Java System Access Manager 6.2 Sun Java System Access Manager 6.1 Sun Java System Access Manager 6 2005Q1 Windows Sun Java System Access Manager 6 2005Q1 Solaris x86 Sun Java System Access Manager 6 2005Q1 Solaris SPA Sun Java System Access Manager 6 2005Q1 Linux Sun Java System Access Manager 6 2005Q1 2005Q1 Sun Glassfish Enterprise Server 2.1.1 Sun Glassfish Enterprise Server 2.1 Sun Convergence 1.0 Sun Convergence 0 Oracle Weblogic Server 10.3.3 Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.1 Oracle Weblogic Server 9.0 GA Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 10.0 MP2 Oracle Transportation Manager 6.2 Oracle Transportation Manager 6.1 Oracle Transportation Manager 6.0 Oracle Transportation Manager 5.5 Oracle Secure Backup 10.3.0.2 Oracle PeopleSoft Enterprise PeopleTools 8.51 Oracle PeopleSoft Enterprise PeopleTools 8.50 Oracle PeopleSoft Enterprise PeopleTools 8.49 Oracle PeopleSoft Enterprise HRMS 9.1 Oracle PeopleSoft Enterprise HRMS 9.0 Oracle PeopleSoft Enterprise HRMS 8.9 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.1 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.0 Oracle PeopleSoft Enterprise Customer Relationship Manage 8.9 Oracle Outside In 8.3.0 Oracle Oracle11g Standard Edition 11.1 .7 Oracle Oracle11g Standard Edition 11.2.0.1 R2 Oracle Oracle10g Standard Edition 10.2 .5 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2 .5 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .5 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 11.2.0.1 Oracle Oracle10g Enterprise Edition 11.1.0.7 Oracle Oracle10g Enterprise Edition 10.2.0.4 Oracle JRockit R28.0.1 Oracle JRockit R27.6.7 Oracle Inform Portal 5.0 Oracle Inform Portal 4.6 Oracle Inform Portal 4.5 Oracle GoldenGate Veridata 3.0.0.4 Oracle Fusion Middleware 11.1.1.3.0 Oracle Fusion Middleware 11.1.1.2.0 Oracle Enterprise Manager Real User Experience Insight (RUEI) 6.0 Oracle Enterprise Manager 10.2.0.5 Oracle E-Business Suite 12 12.1.2 Oracle E-Business Suite 12 12.1.1 Oracle E-Business Suite 12 12.0.6 Oracle E-Business Suite 12 12.0.5 Oracle E-Business Suite 12 12.0.4 Oracle E-Business Suite 12 12.1.3 Oracle E-Business Suite 11i 11.5.10.2 Oracle Document Capture 10.1.3.5.0 Oracle Document Capture 10.1.3.4 Oracle BI Publisher 10.1.3 .4.1 Oracle BI Publisher 10.1.3 .4.0 Oracle BI Publisher 10.1.3 .3.2 Oracle BI Publisher 11.1.1.3 Oracle Beehive 2.0.1.3 Oracle Beehive 2.0.1.2.1 Oracle Beehive 2.0.1.2 Oracle Beehive 2.0.1.1 Oracle Beehive 2.0.1.0 Oracle Audit Vault 10.2.3 Oracle Audit Vault 10.2.3.2 Oracle Argus Safety 5.0.3 Oracle Argus Safety 5.0.2 Oracle Argus Safety 5.0.1 Oracle Argus Safety 5.0 Oracle Application Server 10.1.2.3 Oracle Agile Core 9.3.1 Oracle Agile Core 9.3.0.2 OpenOffice OpenOffice 3.2.1 OpenOffice OpenOffice 3.1.1 OpenOffice OpenOffice 3.1 OpenOffice OpenOffice 2.4.3 OpenOffice OpenOffice 2.4.2 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 2.0.3 -1 OpenOffice OpenOffice 2.0.3 OpenOffice OpenOffice 2.0.2 OpenOffice OpenOffice 2.0.1 OpenOffice OpenOffice 2.0 Beta OpenOffice OpenOffice 1.9.125 OpenOffice OpenOffice 1.9.79 OpenOffice OpenOffice 1.9.29 OpenOffice OpenOffice 1.1.52 OpenOffice OpenOffice 1.1.51 OpenOffice OpenOffice 1.1.5 OpenOffice OpenOffice 1.1.4 OpenOffice OpenOffice 1.1.3 -9sarge3 OpenOffice OpenOffice 1.1.3 OpenOffice OpenOffice 1.1.2 OpenOffice OpenOffice 1.1.1 OpenOffice OpenOffice 1.1 .0 OpenOffice OpenOffice 1.0.3 OpenOffice OpenOffice 1.0.2 OpenOffice OpenOffice 1.0.1 OpenOffice OpenOffice 3.2 OpenOffice OpenOffice 2.4 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.1 OpenOffice OpenOffice 1.1.5-10.6.0.5.EL4 OpenOffice OpenOffice 1.1.2-38.2.0.EL3 |
| Not Vulnerable: | |
Discussion
RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
Oracle has released advance notification regarding the January 2011 Critical Patch Update (CPU) to be released on January 18, 2011. The update addresses 66 vulnerabilities affecting the following software:
Oracle Database Server
Oracle Secure Backup
Oracle Fusion Middleware
Oracle Enterprise Manager Grid Control
Oracle Solaris products
Oracle Applications
Oracle Supply Chain Products Suite
Oracle PeopleSoft and JDEdwards Suite
Oracle Industry Applications
Oracle Sun Products
Oracle Open Office Suite
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document these issues:
34083 Sun Java System Communications Express Multiple HTML Injection Vulnerabilities
40235 MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
42202 OpenOffice Impress File Multiple Buffer Overflow Vulnerabilities
42637 Apache Derby 'BUILTIN' Authentication Insecure Password Hashing Vulnerability
43819 GNU libc glob(3) 'GLOB_LIMIT' Remote Denial of Service Vulnerability
43965 Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
43971 Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
43979 Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
43985 Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
43988 Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
43992 Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
43994 Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
44009 Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
44011 Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
44012 Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
44013 Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
44014 Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
44016 Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
44017 Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
44026 Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
44027 Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
44028 Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
44030 Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
44032 Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
44035 Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
44038 Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
45844 Oracle Audit Vault CVE-2010-4449 Remote Code Execution Vulnerability
45845 Oracle Database Server CVE-2010-4413 Remote Scheduler Agent Vulnerability
45846 Oracle Document Capture CVE-2010-3598 Remote Vulnerability
45847 Oracle WebLogic Server CVE-2010-3510 Remote Security Vulnerability
45848 Oracle Fusion Middleware CVE-2010-4455 Remote Oracle HTTP Server Vulnerability
45849 Oracle Document Capture CVE-2010-3595 Remote Vulnerability
45850 Oracle Secure Backup CVE-2010-3596 Remote mod_ssl Vulnerability
45851 Oracle Document Capture CVE-2010-3591 Remote Vulnerability
45852 Oracle Fusion Middleware CVE-2010-4437 Remote Oracle WebLogic Server Vulnerability
45853 Oracle Solaris CVE-2010-4435 Remote CDE Calendar Manager Service Daemon Vulnerability
45854 Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability
45855 Oracle Database Server CVE-2010-4420 Local Database Vault Vulnerability
45856 Oracle Document Capture CVE-2010-3599 Remote Vulnerability
45857 Oracle PeopleSoft Enterprise HRMS CVE-2010-4461 Remote Vulnerability
45858 Oracle Fusion Middleware CVE-2010-3588 Remote Oracle Discoverer Vulnerability
45859 Oracle Cluster Verify Utility CVE-2010-4423 Local Vulnerability
45860 Oracle Supply Chain Product CVE-2010-4429 Remote Security Vulnerability
45861 Oracle Application Object Library CVE-2010-3589 Remote Security Vulnerability
45862 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-4424 Remote Vulnerability
45863 Oracle PeopleSoft Enterprise HRMS CVE-2010-4430 Remote Vulnerability
45864 Oracle Solaris 11 Express CVE-2010-4457 Remote CIFS Vulnerability
45865 Oracle PeopleSoft CVE-2010-4418 Remote Enterprise PeopleTools Vulnerability
45866 Oracle PeopleSoft Enterprise HRMS CVE-2010-4439 Remote Vulnerability
45867 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-4426 Remote Vulnerability
45868 Oracle Fusion Middleware CVE-2010-4416 Remote Oracle GoldenGate Veridata Vulnerability
45869 Oracle PeopleSoft Enterprise HRMS CVE-2010-4445 Remote Vulnerability
45870 Oracle E-Business Suite CVE-2010-3587 Common Applications Component Remote Vulnerability
45871 Oracle Document Capture CVE-2010-3592 Remote Vulnerability
45872 Oracle Supply Chain Product CVE-2010-3505 Remote Security Vulnerability
45873 Oracle PeopleSoft Enterprise HRMS CVE-2010-4428 Remote Vulnerability
45874 Oracle Enterprise Manager Real User Experience Insight (RUEI) SQL Injection Vulnerability
45875 Oracle Transportation Manager CVE-2010-4432 Remote Security Vulnerability
45876 Oracle VM VirtualBox CVE-2010-4414 Local Extensions Vulnerability
45877 Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability
45878 Oracle Solaris CVE-2010-4459 Local Vulnerability
45879 Oracle PeopleSoft CVE-2010-4419 Remote Enterprise CRM Vulnerability
45880 Oracle Spatial CVE-2010-3590 Remote Security Vulnerability
45881 Oracle PeopleSoft CVE-2010-4441 Remote Enterprise HRMS Vulnerability
45883 Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability
45884 Oracle OpenSSO and Java SAM CVE-2010-4444 Remote Vulnerability
45885 Oracle SunMC CVE-2010-4436 Remote Vulnerability
45886 Oracle Solaris CVE-2010-4443 Local Solaris Vulnerability
45887 Oracle Sun Convergence CVE-2010-4464 Remote Vulnerability
45888 Oracle Sun Solaris CVE-2010-4440 Local Security Vulnerability
45889 Oracle Solaris CVE-2010-4458 Local Solaris Vulnerability
45890 Oracle Sun GlassFish and Message Queue CVE-2010-4438 Local Security Vulnerability
45891 Oracle Solaris CVE-2010-4442 Local Kernel Vulnerability
45892 Oracle Sun Solaris CVE-2010-4446 Local Security Vulnerability
45893 Oracle Sun Solaris 10 CVE-2010-4433 Remote Security Vulnerability
45895 Oracle Solaris CVE-2010-4460 Local Solaris Vulnerability
45896 Oracle Sun Java System Communications Express CVE-2010-4456 Remote Web Mail Vulnerability
45897 Oracle BI Publisher CVE-2010-4425 Remote Security Vulnerability
45898 Oracle Sun Java System Portal Server CVE-2010-4431 Local Security Vulnerability
45899 Oracle PeopleSoft CVE-2010-4434 Remote Enterprise PeopleTools Vulnerability
45900 Oracle BI Publisher CVE-2010-4427 Remote Security Vulnerability
45901 Oracle Outside In Technology CVE-2010-3597 Local Security Vulnerability
45902 Oracle CVE-2010-3593 Remote Health Sciences - Oracle Argus Safety Vulnerability
45903 Oracle Sun Solaris CVE-2010-3586 Local Security Vulnerability
45904 Oracle Solaris CVE-2010-4415 Local 'libc' Vulnerability
45905 Oracle Database Vault CVE-2010-4421 Remote Security Vulnerability
Oracle has released advance notification regarding the January 2011 Critical Patch Update (CPU) to be released on January 18, 2011. The update addresses 66 vulnerabilities affecting the following software:
Oracle Database Server
Oracle Secure Backup
Oracle Fusion Middleware
Oracle Enterprise Manager Grid Control
Oracle Solaris products
Oracle Applications
Oracle Supply Chain Products Suite
Oracle PeopleSoft and JDEdwards Suite
Oracle Industry Applications
Oracle Sun Products
Oracle Open Office Suite
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document these issues:
34083 Sun Java System Communications Express Multiple HTML Injection Vulnerabilities
40235 MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
42202 OpenOffice Impress File Multiple Buffer Overflow Vulnerabilities
42637 Apache Derby 'BUILTIN' Authentication Insecure Password Hashing Vulnerability
43819 GNU libc glob(3) 'GLOB_LIMIT' Remote Denial of Service Vulnerability
43965 Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
43971 Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
43979 Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
43985 Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
43988 Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
43992 Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
43994 Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
44009 Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
44011 Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
44012 Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
44013 Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
44014 Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
44016 Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
44017 Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
44026 Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
44027 Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
44028 Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
44030 Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
44032 Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
44035 Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
44038 Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
45844 Oracle Audit Vault CVE-2010-4449 Remote Code Execution Vulnerability
45845 Oracle Database Server CVE-2010-4413 Remote Scheduler Agent Vulnerability
45846 Oracle Document Capture CVE-2010-3598 Remote Vulnerability
45847 Oracle WebLogic Server CVE-2010-3510 Remote Security Vulnerability
45848 Oracle Fusion Middleware CVE-2010-4455 Remote Oracle HTTP Server Vulnerability
45849 Oracle Document Capture CVE-2010-3595 Remote Vulnerability
45850 Oracle Secure Backup CVE-2010-3596 Remote mod_ssl Vulnerability
45851 Oracle Document Capture CVE-2010-3591 Remote Vulnerability
45852 Oracle Fusion Middleware CVE-2010-4437 Remote Oracle WebLogic Server Vulnerability
45853 Oracle Solaris CVE-2010-4435 Remote CDE Calendar Manager Service Daemon Vulnerability
45854 Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability
45855 Oracle Database Server CVE-2010-4420 Local Database Vault Vulnerability
45856 Oracle Document Capture CVE-2010-3599 Remote Vulnerability
45857 Oracle PeopleSoft Enterprise HRMS CVE-2010-4461 Remote Vulnerability
45858 Oracle Fusion Middleware CVE-2010-3588 Remote Oracle Discoverer Vulnerability
45859 Oracle Cluster Verify Utility CVE-2010-4423 Local Vulnerability
45860 Oracle Supply Chain Product CVE-2010-4429 Remote Security Vulnerability
45861 Oracle Application Object Library CVE-2010-3589 Remote Security Vulnerability
45862 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-4424 Remote Vulnerability
45863 Oracle PeopleSoft Enterprise HRMS CVE-2010-4430 Remote Vulnerability
45864 Oracle Solaris 11 Express CVE-2010-4457 Remote CIFS Vulnerability
45865 Oracle PeopleSoft CVE-2010-4418 Remote Enterprise PeopleTools Vulnerability
45866 Oracle PeopleSoft Enterprise HRMS CVE-2010-4439 Remote Vulnerability
45867 Oracle PeopleSoft Enterprise PeopleTools CVE-2010-4426 Remote Vulnerability
45868 Oracle Fusion Middleware CVE-2010-4416 Remote Oracle GoldenGate Veridata Vulnerability
45869 Oracle PeopleSoft Enterprise HRMS CVE-2010-4445 Remote Vulnerability
45870 Oracle E-Business Suite CVE-2010-3587 Common Applications Component Remote Vulnerability
45871 Oracle Document Capture CVE-2010-3592 Remote Vulnerability
45872 Oracle Supply Chain Product CVE-2010-3505 Remote Security Vulnerability
45873 Oracle PeopleSoft Enterprise HRMS CVE-2010-4428 Remote Vulnerability
45874 Oracle Enterprise Manager Real User Experience Insight (RUEI) SQL Injection Vulnerability
45875 Oracle Transportation Manager CVE-2010-4432 Remote Security Vulnerability
45876 Oracle VM VirtualBox CVE-2010-4414 Local Extensions Vulnerability
45877 Oracle Fusion Middleware CVE-2010-4453 Remote Oracle WebLogic Server Vulnerability
45878 Oracle Solaris CVE-2010-4459 Local Vulnerability
45879 Oracle PeopleSoft CVE-2010-4419 Remote Enterprise CRM Vulnerability
45880 Oracle Spatial CVE-2010-3590 Remote Security Vulnerability
45881 Oracle PeopleSoft CVE-2010-4441 Remote Enterprise HRMS Vulnerability
45883 Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability
45884 Oracle OpenSSO and Java SAM CVE-2010-4444 Remote Vulnerability
45885 Oracle SunMC CVE-2010-4436 Remote Vulnerability
45886 Oracle Solaris CVE-2010-4443 Local Solaris Vulnerability
45887 Oracle Sun Convergence CVE-2010-4464 Remote Vulnerability
45888 Oracle Sun Solaris CVE-2010-4440 Local Security Vulnerability
45889 Oracle Solaris CVE-2010-4458 Local Solaris Vulnerability
45890 Oracle Sun GlassFish and Message Queue CVE-2010-4438 Local Security Vulnerability
45891 Oracle Solaris CVE-2010-4442 Local Kernel Vulnerability
45892 Oracle Sun Solaris CVE-2010-4446 Local Security Vulnerability
45893 Oracle Sun Solaris 10 CVE-2010-4433 Remote Security Vulnerability
45895 Oracle Solaris CVE-2010-4460 Local Solaris Vulnerability
45896 Oracle Sun Java System Communications Express CVE-2010-4456 Remote Web Mail Vulnerability
45897 Oracle BI Publisher CVE-2010-4425 Remote Security Vulnerability
45898 Oracle Sun Java System Portal Server CVE-2010-4431 Local Security Vulnerability
45899 Oracle PeopleSoft CVE-2010-4434 Remote Enterprise PeopleTools Vulnerability
45900 Oracle BI Publisher CVE-2010-4427 Remote Security Vulnerability
45901 Oracle Outside In Technology CVE-2010-3597 Local Security Vulnerability
45902 Oracle CVE-2010-3593 Remote Health Sciences - Oracle Argus Safety Vulnerability
45903 Oracle Sun Solaris CVE-2010-3586 Local Security Vulnerability
45904 Oracle Solaris CVE-2010-4415 Local 'libc' Vulnerability
45905 Oracle Database Vault CVE-2010-4421 Remote Security Vulnerability
Exploit / POC
RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
Solution:
The vendor plans to release updates to address these issues on January 18, 2011. Please see the references for more information.
Solution:
The vendor plans to release updates to address these issues on January 18, 2011. Please see the references for more information.
References
RETIRED: Oracle January 2011 Critical Patch Update Multiple Vulnerabilities
References:
References: