Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability

Bugtraq ID:	45854
Class:	Input Validation Error
CVE:	CVE-2010-4417
Remote:	Yes
Local:	No
Published:	Jan 18 2011 12:00AM
Updated:	Jan 19 2011 08:21AM
Credit:	1c239c43f521145fa8385d64a9c32243 of unsecurityresearch.com
Vulnerable:	Oracle Beehive 2.0.1.3 Oracle Beehive 2.0.1.2.1 Oracle Beehive 2.0.1.2 Oracle Beehive 2.0.1.1 Oracle Beehive 2.0.1.0
Not Vulnerable:

Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability

Oracle Fusion Middleware is prone to a remote code-execution vulnerability in Beehive.

Attackers can exploit this issue to execute arbitrary code in the context of the application.

This vulnerability affects the following supported versions:
2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, 2.0.1.3

Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability

Attackers can use standard tools to exploit this issue.

Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Fusion Middleware CVE-2010-4417 Beehive Remote Code Execution Vulnerability

References:

• Oracle Beehive voice-servlet Remote Code Execution Vulnerability (Zero Day Initiative)
  
• Oracle Critical Patch Update Advisory - January 2011 (Oracle)