Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
BID:45851
Info
Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
| Bugtraq ID: | 45851 |
| Class: | Unknown |
| CVE: |
CVE-2010-3591 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 19 2011 12:00AM |
| Updated: | Jan 25 2011 04:21PM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Document Capture 10.1.3.5.0 Oracle Document Capture 10.1.3.4 |
| Not Vulnerable: | |
Discussion
Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
Oracle Document Capture is prone to multiple remote vulnerabilities.
These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Internal Operations' sub component is affected.
These vulnerabilities affect the following supported versions:
10.1.3.4, 10.1.3.5
Oracle Document Capture is prone to multiple remote vulnerabilities.
These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Internal Operations' sub component is affected.
These vulnerabilities affect the following supported versions:
10.1.3.4, 10.1.3.5
Exploit / POC
Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
The following proof-of-concept code is available:
The following proof-of-concept code is available:
Solution / Fix
Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Oracle Document Capture CVE-2010-3591 Multiple Remote Vulnerabilities
References:
References:
- [DSECRG-11-004] Oracle Document Capture Actbar2.ocx - insecure method (Digital Security Research Group)
- [DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method (Digital Security Research Group)
- [DSECRG-00153] Oracle Document Capture Actbar2.ocx - insecure method (Alexandr Polyakov
) - [DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method (Alexandr Polyakov
) - Oracle Critical Patch Update Advisory - January 2011 (Oracle)