RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
BID:47376
Info
RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
| Bugtraq ID: | 47376 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 14 2011 12:00AM |
| Updated: | Apr 20 2011 07:04PM |
| Credit: | Oracle |
| Vulnerable: |
Sun StarSuite 9.0 Update 3 Sun StarSuite 9 Sun StarSuite 8.0 Update 14 Sun StarSuite 8.0 Update 13 Sun StarSuite 8 Update 7 Sun StarSuite 8 Update 6 Sun StarSuite 8 Update 12 Sun StarSuite 8 Update 11 Sun StarSuite 8 Sun StarSuite 7.0 PP10 Sun StarSuite 7 PP9 Sun StarSuite 7 PP14 Sun StarSuite 7 PP13 Sun StarSuite 7 Sun StarSuite 6.0 PP7 Sun StarSuite 6 PP6 Sun StarSuite 6 Sun StarOffice 7.0 Sun StarOffice 5.2 Sun StarOffice 5.1 Sun StarOffice 9.0 Update 3 Sun StarOffice 9.0 Sun StarOffice 8.0 Update 14 Sun StarOffice 8.0 Update 13 Sun StarOffice 8.0 Update 12 Sun StarOffice 8.0 Update 11 Sun StarOffice 8.0 Sun StarOffice 8 Update 7 Sun StarOffice 8 Update 6 Sun StarOffice 7.0 PP9 Sun StarOffice 7.0 PP10 Sun StarOffice 7 PP14 Sun StarOffice 7 PP13 Sun StarOffice 6.0 PP7 Sun StarOffice 6.0 PP6 Sun StarOffice 6.0 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 11 Express Sun Solaris 11 Sun Solaris 11 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSSO Enterprise 8.0 Sun OpenSSO Enterprise 0 Sun OpenSolaris svn_126 Sun OpenSolaris snv_111b Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_151a Sun OpenSolaris build snv_137 Sun OpenSolaris build snv_136 Sun OpenSolaris build snv_135 Sun OpenSolaris build snv_134a Sun OpenSolaris build snv_134 Sun OpenSolaris build snv_133 Sun OpenSolaris build snv_132 Sun OpenSolaris build snv_131 Sun OpenSolaris build snv_130 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_129 Sun OpenSolaris build snv_128 Sun OpenSolaris build snv_127 Sun OpenSolaris build snv_126 Sun OpenSolaris build snv_125 Sun OpenSolaris build snv_124 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris Build Snv 111B Sun OpenSolaris 0 Sun Management Center 3.6.1 Sun Management Center 4.0 Sun Management Center 3.6 Sun Java System Web Server 7.0 Plugin 0 Sun Java System Web Server 6.1 SP9 Sun Java System Web Server 6.1 SP8 Sun Java System Web Server 6.1 SP7 Sun Java System Web Server 6.1 SP6 Sun Java System Web Server 6.1 SP5 Sun Java System Web Server 6.1 SP4 Sun Java System Web Server 6.1 SP3 Sun Java System Web Server 6.1 SP2 Sun Java System Web Server 6.1 SP11 Sun Java System Web Server 6.1 SP10 Sun Java System Web Server 6.1 SP1 Sun Java System Web Server 6.1 Sun Java System Web Server 6.0 SP9 Sun Java System Web Server 6.0 SP11 Sun Java System Web Server 6.0 SP10 Sun Java System Web Server 6.0 SP8 Sun Java System Web Server 6.0 SP7 Sun Java System Web Server 6.0 SP6 Sun Java System Web Server 6.0 SP5 Sun Java System Web Server 6.0 SP4 Sun Java System Web Server 6.0 SP3 Sun Java System Web Server 6.0 SP2 Sun Java System Web Server 6.0 SP1 Sun Java System Web Server 6.0 Sun Java System Web Server 7.0 Update 8 Sun Java System Web Server 7.0 Update 7 Sun Java System Web Server 7.0 Update 6 Sun Java System Web Server 7.0 Update 4 Sun Java System Web Server 7.0 Update 3 Sun Java System Web Server 7.0 Update 2 Sun Java System Web Server 7.0 Update 1 Sun Java System Web Server 7.0 Sun Java System Web Server 6.1 SP11 Sun Java System Web Server 6.1 SP10 Sun Java System Web Server 6.1 Sun Java System Portal Server 6.3.1 Sun Java System Portal Server 7.2 Sun Java System Portal Server 7.1 Sun Java System Portal Server 7.0 Sun Java System Portal Server 7 Sun Java System Messaging Server 6 2005Q1 Sun Java System Messaging Server 7.0 Sun Java System Messaging Server 6.3 Sun Java System Messaging Server 6.3 Sun Java System Messaging Server 6.2 Sun Java System Messaging Server 6.1 Sun Java System Messaging Server 6.0 Sun Java System Communications Express 6.3 Sun Java System Communications Express 2005Q4 Sun Java System Communications Express 2005Q1 Sun Java System Communications Express 2004Q2 Sun Java System Communications Express 0 Sun Java System Application Server Standard Platform 8.1 2005 Q1 Sun Java System Application Server Standard Edition 8.2 Sun Java System Application Server Standard 7.0.0 2004Q2 R5 Sun Java System Application Server Standard 7.0.0 2004Q2 R4 Sun Java System Application Server Platform Edition 8.1 2005 Q1 UR1 Sun Java System Application Server Platform Edition 8.1 2005 Q1 Sun Java System Application Server Platform Edition 9.1 Sun Java System Application Server Platform Edition 9.0 Update 1 Sun Java System Application Server Platform Edition 9.0 Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Platform Edition 8.1 Sun Java System Application Server Enterprise Edition 8.1 2005Q1RHEL2.1/RHEL3 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.1 Sun Java System Application Server Enterprise 7.0.0 2004Q2 R5 Sun Java System Application Server Enterprise 7.0.0 2004Q2 R4 Sun Java System Application Server 8.0 Platform Edition Sun Java System Application Server 7.1 Sun Java System Application Server 7.0 UR7 Standard Edition Sun Java System Application Server 7.0 UR7 Platform Edition Sun Java System Application Server 7.0 UR6 Standard Edition Sun Java System Application Server 7.0 UR6 Platform Edition Sun Java System Application Server 7.0 UR5 Standard Edition Sun Java System Application Server 7.0 UR5 Platform Edition Sun Java System Application Server 7.0 UR4 Sun Java System Application Server 7.0 2004Q2 R3 Standard Sun Java System Application Server 7.0 2004Q2 R3 Enterprise Sun Java System Application Server 7.0 2004Q2 R2 Standard Sun Java System Application Server 7.0 2004Q2 R2 Enterprise Sun Java System Application Server 7.0 2004Q2 R1Standard Sun Java System Application Server 7.0 2004Q2 R1Enterprise Sun Java System Application Server 7.0 Standard Edition Sun Java System Application Server 7.0 Platform Edition Sun Java System Application Server 7.0 Enterprise Edition Sun Java System Application Server 7.0 2004Q2 Sun Java System Application Server 9.0_0.1 Sun Java System Application Server 8.2 Sun Java System Application Server 8.1 Sun Java System Application Server 8.0 Sun Java System Application Server 7 2004Q2 Sun Java System Access Manager Policy Agent 2.2 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.1 HP-UX Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 7.0 2005Q4 HP-UX Sun Java System Access Manager 6.3 2005Q1 x86 Sun Java System Access Manager 6.3 2005Q1 SPARC Sun Java System Access Manager 6.3 2005Q1 Linux Sun Java System Access Manager 6.2 2004Q2 Solaris x Sun Java System Access Manager 6.2 2004Q2 Solaris S Sun Java System Access Manager 6.2 2004Q2 Linux Sun Java System Access Manager 6.2 Sun Java System Access Manager 6.1 Sun Java System Access Manager 6 2005Q1 Windows Sun Java System Access Manager 6 2005Q1 Solaris x86 Sun Java System Access Manager 6 2005Q1 Solaris SPA Sun Java System Access Manager 6 2005Q1 Linux Sun Java System Access Manager 6 2005Q1 2005Q1 Sun Java Dynamic Management Kit 5.1 Sun Glassfish Enterprise Server 3.0.1 Sun Glassfish Enterprise Server 2.1.1 Sun Glassfish Enterprise Server 2.1 Sun Convergence 1.0 Sun Convergence 0 Oracle Weblogic Server 10.3.3 Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 9.2.4 Oracle Weblogic Server 9.2 MP3 Oracle Weblogic Server 9.1 Oracle Weblogic Server 9.0 GA Oracle Weblogic Server 8.1 SP6 Oracle Weblogic Server 7.0 SP7 Oracle Weblogic Server 10.3.4 Oracle Weblogic Server 10.0 MP2 Oracle Transportation Manager 6.2 Oracle Transportation Manager 6.1 Oracle Transportation Manager 6.0 Oracle Transportation Manager 5.5 Oracle Siebel 8.1.1 Oracle Siebel 8.0 Oracle Siebel 7.8.2 Oracle Secure Backup 10.3.0.2 Oracle PeopleSoft Enterprise Portal 9.1 Oracle PeopleSoft Enterprise Portal 9.0 Oracle PeopleSoft Enterprise Portal 8.9 Oracle PeopleSoft Enterprise Portal 8.8 Oracle PeopleSoft Enterprise PeopleTools 8.51 Oracle PeopleSoft Enterprise PeopleTools 8.50 Oracle PeopleSoft Enterprise PeopleTools 8.49 Oracle PeopleSoft Enterprise HRMS 9.1 Oracle PeopleSoft Enterprise HRMS 9.0 Oracle PeopleSoft Enterprise HRMS 8.9 Oracle PeopleSoft Enterprise ELS 9.1 Oracle PeopleSoft Enterprise ELS 9.0 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.1 Oracle PeopleSoft Enterprise Customer Relationship Manage 9.0 Oracle PeopleSoft Enterprise Customer Relationship Manage 8.9 Oracle Outside In 8.3.5.0 Oracle Outside In 8.3.2.0 Oracle Outside In 8.3.0 Oracle Oracle11g Standard Edition 11.1 .7 Oracle Oracle11g Standard Edition 11.2.0.2.0 Oracle Oracle11g Standard Edition 11.2.0.1.0 Oracle Oracle11g Standard Edition 11.2.0.1 R2 Oracle Oracle11g Enterprise Edition 11.2.0.2.0 Oracle Oracle11g Enterprise Edition 11.2.0.1.0 Oracle Oracle11g Enterprise Edition 11.1.0.7 Oracle Oracle10g Standard Edition 10.2 .5 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Standard Edition 10.1 .0.5 Oracle Oracle10g Standard Edition 10.2.0.4 Oracle Oracle10g Personal Edition 10.2 .5 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2.0.4 Oracle Oracle10g Enterprise Edition 10.2 .5 Oracle Oracle10g Enterprise Edition 10.2 .3 Oracle Oracle10g Enterprise Edition 10.1 .5 Oracle Oracle10g Enterprise Edition 11.2.0.1 Oracle Oracle10g Enterprise Edition 11.1.0.7 Oracle Oracle10g Enterprise Edition 10.2.0.4 Oracle Oracle10g Application Server 10.1.3 .5.0 Oracle Oracle10g Application Server 10.1.2.3.0 Oracle JRockit R28.1.1 Oracle JRockit R28.0.1 Oracle JRockit R28.0.0 Oracle JRockit R27.6.8 Oracle JRockit R27.6.7 Oracle JRockit R27.6.6 Oracle JRockit R27.6.5 Oracle JRockit R27.6.4 Oracle JRockit R27.6.3 Oracle JRockit R27.6.2 Oracle JRockit r27.6.0-50 1.5.0_15 Oracle JRockit R27.6.0 Oracle JRockit R27.1.0 Oracle JD Edwards OneWorld Tools 24.1 Oracle JD Edwards EnterpriseOne 8.98 Oracle Inform Portal 5.0 Oracle Inform Portal 4.6 Oracle Inform Portal 4.5 Oracle Identity Management 10.1.4.3 Oracle Identity Management 10.1.4.0.1 Oracle Identity Management 10.1.4.0.1 Oracle GoldenGate Veridata 3.0.0.4 Oracle Fusion Middleware 11.1.1.4.0 Oracle Fusion Middleware 11.1.1.3.0 Oracle Fusion Middleware 11.1.1.2.0 Oracle Enterprise Manager Real User Experience Insight (RUEI) 6.0 Oracle Enterprise Manager 10.2.0.5 Oracle E-Business Suite 12 12.1.2 Oracle E-Business Suite 12 12.1.1 Oracle E-Business Suite 12 12.0.6 Oracle E-Business Suite 12 12.0.5 Oracle E-Business Suite 12 12.0.4 Oracle E-Business Suite 12 12.1.3 Oracle E-Business Suite 11i 11.5.10.2 Oracle Document Capture 10.1.3.5.0 Oracle Document Capture 10.1.3.4 Oracle BI Publisher 10.1.3 .4.1 Oracle BI Publisher 10.1.3 .4.0 Oracle BI Publisher 10.1.3 .3.2 Oracle BI Publisher 11.1.1.3 Oracle Beehive 2.0.1.3 Oracle Beehive 2.0.1.2.1 Oracle Beehive 2.0.1.2 Oracle Beehive 2.0.1.1 Oracle Beehive 2.0.1.0 Oracle Audit Vault 10.2.3 Oracle Audit Vault 10.2.3.2 Oracle Argus Safety 5.0.3 Oracle Argus Safety 5.0.2 Oracle Argus Safety 5.0.1 Oracle Argus Safety 5.0 Oracle Application Server 10.1.2.3 Oracle Agile Core 9.3.1 Oracle Agile Core 9.3.0.2 OpenOffice OpenOffice 3.2.1 OpenOffice OpenOffice 3.1.1 OpenOffice OpenOffice 3.1 OpenOffice OpenOffice 2.4.3 OpenOffice OpenOffice 2.4.2 OpenOffice OpenOffice 2.4.1 OpenOffice OpenOffice 2.3.1 OpenOffice OpenOffice 2.3 OpenOffice OpenOffice 2.2.1 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.0.4 OpenOffice OpenOffice 2.0.3 -1 OpenOffice OpenOffice 2.0.3 OpenOffice OpenOffice 2.0.2 OpenOffice OpenOffice 2.0.1 OpenOffice OpenOffice 2.0 Beta OpenOffice OpenOffice 1.9.125 OpenOffice OpenOffice 1.9.79 OpenOffice OpenOffice 1.9.29 OpenOffice OpenOffice 1.1.52 OpenOffice OpenOffice 1.1.51 OpenOffice OpenOffice 1.1.5 OpenOffice OpenOffice 1.1.4 OpenOffice OpenOffice 1.1.3 -9sarge3 OpenOffice OpenOffice 1.1.3 OpenOffice OpenOffice 1.1.2 OpenOffice OpenOffice 1.1.1 OpenOffice OpenOffice 1.1 .0 OpenOffice OpenOffice 1.0.3 OpenOffice OpenOffice 1.0.2 OpenOffice OpenOffice 1.0.1 OpenOffice OpenOffice 3.2 OpenOffice OpenOffice 2.4 OpenOffice OpenOffice 2.2 OpenOffice OpenOffice 2.1 OpenOffice OpenOffice 1.1.5-10.6.0.5.EL4 OpenOffice OpenOffice 1.1.2-38.2.0.EL3 iPlanet E-Commerce Solutions iPlanet Web Server 6.0 SP2 iPlanet E-Commerce Solutions iPlanet Web Server 6.0 SP1 iPlanet E-Commerce Solutions iPlanet Web Server 6.0 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP9 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP8 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP7 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP6 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP5 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP4 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP3 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP2 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP12 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP11 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP10 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 SP1 iPlanet E-Commerce Solutions iPlanet Web Server 4.1 iPlanet E-Commerce Solutions iPlanet Web Server 4.0 |
| Not Vulnerable: | |
Discussion
RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
Oracle has released advance notification regarding the April 2011 Critical Patch Update (CPU) to be released on April 19, 2011. The update addresses 73 vulnerabilities affecting the following software:
Oracle Database
Oracle Fusion Middleware
Oracle Application Server
Oracle Identity Management
Oracle JRockit
Oracle Outside In Technology
Oracle WebLogic Server
Oracle E-Business Suite
Oracle Agile Technology Platform
Oracle PeopleSoft Enterprise CRM
Oracle PeopleSoft Enterprise ELS
Oracle PeopleSoft Enterprise HRMS
Oracle PeopleSoft Enterprise Portal
Oracle PeopleSoft Enterprise People Tools
Oracle JD Edwards OneWorld Tools
Oracle JD Edwards EnterpriseOne Tools
Oracle Siebel CRM Core
Oracle InForm
Oracle Sun Product Suite
Oracle Open Office
StarOffice/StarSuite
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document the issues:
46031 OpenOffice Multiple Remote Code Execution Vulnerabilities
46091 Oracle Java Floating-Point Value Denial of Service Vulnerability
46387 Oracle Java SE and Java for Business CVE-2010-4470 Remote Java Runtime Environment Vulnerability
46388 Oracle Java 'Applet2ClassLoader' Class Unsigned Applet Remote Code Execution Vulnerability
46391 Oracle Java SE and Java for Business Java Runtime Environment CVE-2010-4454 Remote Vulnerability
46393 Oracle Java SE and Java for Business CVE-2010-4468 Remote Java Runtime Environment Vulnerability
46394 Oracle Java SE and Java for Business Remote Code Execution Vulnerability
46395 Oracle Java SE and Java for Business CVE-2010-4467 Remote Java Runtime Environment Vulnerability
46397 Oracle Java SE and Java for Business CVE-2010-4450 Remote Java Runtime Environment Vulnerability
46398 Oracle Java SE and Java for Business CVE-2010-4448 Remote Java Runtime Environment Vulnerability
46399 Oracle Java SE and Java for Business CVE-2010-4471 Remote Security Vulnerability
46403 Oracle Java SE and Java for Business CVE-2010-4473 Remote Java Runtime Environment Vulnerability
46404 Oracle Java SE and Java for Business CVE-2010-4472 Remote Java Runtime Environment Vulnerability
46406 Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability
46767 Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability
47171 Oracle Solaris CVE-2011-0412 Password Hash Local Information Disclosure Weakness
47429 Oracle Database Server CVE-2011-0792 Remote Oracle Warehouse Builder Vulnerability
47430 Oracle Database CVE-2011-0806 Network Foundation Remote Vulnerability
47431 Oracle Database Server CVE-2011-0799 Remote Warehouse Builder Vulnerability
47432 Oracle Database Server CVE-2011-0804 Remote Database Vault Vulnerability
47434 Oracle E-Business Suite CVE-2011-0809 Web ADI Remote Vulnerability
47435 Oracle Outside In Technology Lotus 123 File Parsing Remote Code Execution Vulnerability
47436 Oracle Database Server CVE-2011-0793 Remote Database Vault Vulnerability
47437 Oracle Outside In Technology Microsoft CAB File Parsing Remote Code Execution Vulnerability
47438 Oracle Sun GlassFish/Java System Application Server Remote Authentication Bypass Vulnerability
47439 Oracle PeopleSoft Enterprise HRMS CVE-2011-0853 Remote PeopleSoft Enterprise HRMS Vulnerability
47440 Oracle E-Business Suite CVE-2011-0797 Applications Install Remote Vulnerability
47441 Oracle Database Server CVE-2011-0805 Remote UIX Vulnerability
47442 Oracle PeopleSoft Enterprise HRMS CVE-2011-0854 Remote PeopleSoft Enterprise HRMS Vulnerability
47443 Oracle Database Server CVE-2011-0785 Remote Oracle Help Vulnerability
47444 Oracle Sun Solaris 11 Express CVE-2011-0841 Remote Vulnerability
47445 Oracle PeopleSoft Enterprise HRMS CVE-2011-0858 Remote Talent Acquisition Manager Vulnerability
47446 Oracle E-Business Suite CVE-2011-0791 Remote Application Object Library Vulnerability
47448 Oracle PeopleSoft Enterprise HRMS CVE-2011-0857 Remote PeopleSoft Enterprise HRMS Vulnerability
47449 Oracle E-Business Suite CVE-2011-0796 Applications Install Local Vulnerability
47450 Oracle Sun Solaris CVE-2011-0800 Local Vulnerability
47451 Oracle Enterprise Manager Grid Control CVE-2011-0787 Remote Security Vulnerability
47452 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0825 Remote Vulnerability
47453 Oracle PeopleSoft Enterprise HRMS CVE-2011-0859 Remote Global Payroll North America Vulnerability
47454 Oracle Supply Chain Product CVE-2011-0837 Remote Agile Technology Platform Vulnerability
47455 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0824 Remote Vulnerabilty
47456 Oracle Peoplesoft Enterprise CVE-2011-0826 Remote Vulnerability
47459 Oracle PeopleSoft Enterprise HRMS CVE-2011-0860 Remote Global Payroll Spain Vulnerability
47460 Oracle PeopleSoft Enterprise CRM CVE-2011-0850 Remote Vulnerability
47461 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0803 Remote Vulnerability
47462 Oracle PeopleSoft CVE-2011-0828 Remote PeopleSoft Enterprise Vulnerability
47463 Oracle Portal CVE-2011-0798 Remote Security Vulnerability
47464 Oracle JD Edwards OneWorld Tools CVE-2011-0818 Remote Vulnerability
47465 Oracle PeopleSoft Enterprise CVE-2011-0827 Remote Vulnerability
47466 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0819 Remote Vulnerability
47467 Oracle PeopleSoft Enterprise ELS CVE-2011-0851 Remote Vulnerability
47468 Oracle JD Edwards OneWorld Tools CVE-2011-0823 Remote Vulnerability
47469 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0810 Remote Vulnerability
47470 Oracle PeopleSoft CVE-2011-0861 Remote PeopleSoft Enterprise HRMS Vulnerability
47471 Oracle PeopleSoft CVE-2011-0840 Remote PeopleSoft Enterprise PeopleTools Vulnerability
47472 Oracle Peoplesoft Enterprise CVE-2011-0856 Remote Vulnerability
47473 Oracle InForm CVE-2011-0855 Remote Vulnerability
47475 Oracle Application Server CVE-2011-0795 Remote Security Vulnerability
47476 Oracle Sun Solaris CVE-2011-0829 Local Vulnerability
47477 Oracle Solaris CVE-2011-0812 Local Solaris Vulnerability
47478 Oracle Solaris CVE-2011-0839 Local Solaris Vulnerability
47479 Oracle Oracle JD Edwards EnterpriseOne and OneWorld Tools CVE-2011-0836 Remote Vulnerability
47480 Oracle Solaris CVE-2011-0820 Remote Kernel Vulnerability
47481 Oracle OpenSSO & Java System Access Manager CVE-2011-0847 Remote Vulnerability
47483 Oracle Java Dynamic Management Kit CVE-2011-0849 Remote Vulnerability
47484 Oracle Siebel CVE-2011-0833 Remote Siebel CRM Core Vulnerability
47486 Oracle Siebel CVE-2011-0834 Remote Siebel CRM Core Vulnerability
47487 Oracle Java System Access Manager Policy Agent CVE-2011-0846 Remote Web Proxy Agent Vulnerability
47488 Oracle Siebel CVE-2011-0843 Remote Siebel CRM Core Vulnerability
47489 Oracle Application Server CVE-2011-0789 Remote Security Vulnerability
47490 Oracle OpenSSO & Java System Access Manager CVE-2011-0844 Remote Vulnerability
47491 Oracle Solaris CVE-2011-0801 Local Vulnerability
47492 Oracle Solaris CVE-2011-0813 Local Kernel Vulnerability
47493 Oracle Sun Solaris CVE-2011-0821 Local Vulnerability
47494 Oracle Solaris CVE-2011-0790 Local Vulnerability
Oracle has released advance notification regarding the April 2011 Critical Patch Update (CPU) to be released on April 19, 2011. The update addresses 73 vulnerabilities affecting the following software:
Oracle Database
Oracle Fusion Middleware
Oracle Application Server
Oracle Identity Management
Oracle JRockit
Oracle Outside In Technology
Oracle WebLogic Server
Oracle E-Business Suite
Oracle Agile Technology Platform
Oracle PeopleSoft Enterprise CRM
Oracle PeopleSoft Enterprise ELS
Oracle PeopleSoft Enterprise HRMS
Oracle PeopleSoft Enterprise Portal
Oracle PeopleSoft Enterprise People Tools
Oracle JD Edwards OneWorld Tools
Oracle JD Edwards EnterpriseOne Tools
Oracle Siebel CRM Core
Oracle InForm
Oracle Sun Product Suite
Oracle Open Office
StarOffice/StarSuite
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document the issues:
46031 OpenOffice Multiple Remote Code Execution Vulnerabilities
46091 Oracle Java Floating-Point Value Denial of Service Vulnerability
46387 Oracle Java SE and Java for Business CVE-2010-4470 Remote Java Runtime Environment Vulnerability
46388 Oracle Java 'Applet2ClassLoader' Class Unsigned Applet Remote Code Execution Vulnerability
46391 Oracle Java SE and Java for Business Java Runtime Environment CVE-2010-4454 Remote Vulnerability
46393 Oracle Java SE and Java for Business CVE-2010-4468 Remote Java Runtime Environment Vulnerability
46394 Oracle Java SE and Java for Business Remote Code Execution Vulnerability
46395 Oracle Java SE and Java for Business CVE-2010-4467 Remote Java Runtime Environment Vulnerability
46397 Oracle Java SE and Java for Business CVE-2010-4450 Remote Java Runtime Environment Vulnerability
46398 Oracle Java SE and Java for Business CVE-2010-4448 Remote Java Runtime Environment Vulnerability
46399 Oracle Java SE and Java for Business CVE-2010-4471 Remote Security Vulnerability
46403 Oracle Java SE and Java for Business CVE-2010-4473 Remote Java Runtime Environment Vulnerability
46404 Oracle Java SE and Java for Business CVE-2010-4472 Remote Java Runtime Environment Vulnerability
46406 Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability
46767 Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability
47171 Oracle Solaris CVE-2011-0412 Password Hash Local Information Disclosure Weakness
47429 Oracle Database Server CVE-2011-0792 Remote Oracle Warehouse Builder Vulnerability
47430 Oracle Database CVE-2011-0806 Network Foundation Remote Vulnerability
47431 Oracle Database Server CVE-2011-0799 Remote Warehouse Builder Vulnerability
47432 Oracle Database Server CVE-2011-0804 Remote Database Vault Vulnerability
47434 Oracle E-Business Suite CVE-2011-0809 Web ADI Remote Vulnerability
47435 Oracle Outside In Technology Lotus 123 File Parsing Remote Code Execution Vulnerability
47436 Oracle Database Server CVE-2011-0793 Remote Database Vault Vulnerability
47437 Oracle Outside In Technology Microsoft CAB File Parsing Remote Code Execution Vulnerability
47438 Oracle Sun GlassFish/Java System Application Server Remote Authentication Bypass Vulnerability
47439 Oracle PeopleSoft Enterprise HRMS CVE-2011-0853 Remote PeopleSoft Enterprise HRMS Vulnerability
47440 Oracle E-Business Suite CVE-2011-0797 Applications Install Remote Vulnerability
47441 Oracle Database Server CVE-2011-0805 Remote UIX Vulnerability
47442 Oracle PeopleSoft Enterprise HRMS CVE-2011-0854 Remote PeopleSoft Enterprise HRMS Vulnerability
47443 Oracle Database Server CVE-2011-0785 Remote Oracle Help Vulnerability
47444 Oracle Sun Solaris 11 Express CVE-2011-0841 Remote Vulnerability
47445 Oracle PeopleSoft Enterprise HRMS CVE-2011-0858 Remote Talent Acquisition Manager Vulnerability
47446 Oracle E-Business Suite CVE-2011-0791 Remote Application Object Library Vulnerability
47448 Oracle PeopleSoft Enterprise HRMS CVE-2011-0857 Remote PeopleSoft Enterprise HRMS Vulnerability
47449 Oracle E-Business Suite CVE-2011-0796 Applications Install Local Vulnerability
47450 Oracle Sun Solaris CVE-2011-0800 Local Vulnerability
47451 Oracle Enterprise Manager Grid Control CVE-2011-0787 Remote Security Vulnerability
47452 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0825 Remote Vulnerability
47453 Oracle PeopleSoft Enterprise HRMS CVE-2011-0859 Remote Global Payroll North America Vulnerability
47454 Oracle Supply Chain Product CVE-2011-0837 Remote Agile Technology Platform Vulnerability
47455 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0824 Remote Vulnerabilty
47456 Oracle Peoplesoft Enterprise CVE-2011-0826 Remote Vulnerability
47459 Oracle PeopleSoft Enterprise HRMS CVE-2011-0860 Remote Global Payroll Spain Vulnerability
47460 Oracle PeopleSoft Enterprise CRM CVE-2011-0850 Remote Vulnerability
47461 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0803 Remote Vulnerability
47462 Oracle PeopleSoft CVE-2011-0828 Remote PeopleSoft Enterprise Vulnerability
47463 Oracle Portal CVE-2011-0798 Remote Security Vulnerability
47464 Oracle JD Edwards OneWorld Tools CVE-2011-0818 Remote Vulnerability
47465 Oracle PeopleSoft Enterprise CVE-2011-0827 Remote Vulnerability
47466 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0819 Remote Vulnerability
47467 Oracle PeopleSoft Enterprise ELS CVE-2011-0851 Remote Vulnerability
47468 Oracle JD Edwards OneWorld Tools CVE-2011-0823 Remote Vulnerability
47469 Oracle JD Edwards EnterpriseOne Tools CVE-2011-0810 Remote Vulnerability
47470 Oracle PeopleSoft CVE-2011-0861 Remote PeopleSoft Enterprise HRMS Vulnerability
47471 Oracle PeopleSoft CVE-2011-0840 Remote PeopleSoft Enterprise PeopleTools Vulnerability
47472 Oracle Peoplesoft Enterprise CVE-2011-0856 Remote Vulnerability
47473 Oracle InForm CVE-2011-0855 Remote Vulnerability
47475 Oracle Application Server CVE-2011-0795 Remote Security Vulnerability
47476 Oracle Sun Solaris CVE-2011-0829 Local Vulnerability
47477 Oracle Solaris CVE-2011-0812 Local Solaris Vulnerability
47478 Oracle Solaris CVE-2011-0839 Local Solaris Vulnerability
47479 Oracle Oracle JD Edwards EnterpriseOne and OneWorld Tools CVE-2011-0836 Remote Vulnerability
47480 Oracle Solaris CVE-2011-0820 Remote Kernel Vulnerability
47481 Oracle OpenSSO & Java System Access Manager CVE-2011-0847 Remote Vulnerability
47483 Oracle Java Dynamic Management Kit CVE-2011-0849 Remote Vulnerability
47484 Oracle Siebel CVE-2011-0833 Remote Siebel CRM Core Vulnerability
47486 Oracle Siebel CVE-2011-0834 Remote Siebel CRM Core Vulnerability
47487 Oracle Java System Access Manager Policy Agent CVE-2011-0846 Remote Web Proxy Agent Vulnerability
47488 Oracle Siebel CVE-2011-0843 Remote Siebel CRM Core Vulnerability
47489 Oracle Application Server CVE-2011-0789 Remote Security Vulnerability
47490 Oracle OpenSSO & Java System Access Manager CVE-2011-0844 Remote Vulnerability
47491 Oracle Solaris CVE-2011-0801 Local Vulnerability
47492 Oracle Solaris CVE-2011-0813 Local Kernel Vulnerability
47493 Oracle Sun Solaris CVE-2011-0821 Local Vulnerability
47494 Oracle Solaris CVE-2011-0790 Local Vulnerability
Exploit / POC
RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
Solution:
The vendor plans to release updates to address these issues on April 19, 2011. Please see the references for more information.
Solution:
The vendor plans to release updates to address these issues on April 19, 2011. Please see the references for more information.
References
RETIRED: Oracle April 2011 Critical Patch Update Multiple Vulnerabilities
References:
References: