RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
BID:50119
Info
RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
| Bugtraq ID: | 50119 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 13 2011 12:00AM |
| Updated: | Mar 19 2015 08:16AM |
| Credit: | Oracle |
| Vulnerable: |
Sun Sun Fire V890 0 Sun Sun Fire V880 Sun Sun Fire V490 0 Sun Sun Fire V480 Sun Sun Fire V440 0 Sun Sun Fire V245 0 Sun Sun Fire V240 0 Sun Sun Fire V215 0 Sun Sun Fire V210 0 Sun Sun Fire V1280 0 Sun Sun Fire V120 0 Sun Sun Fire V100 0 Sun Sun Fire T5140 0 Sun Sun Fire T5120 0 Sun Sun Fire T2000 0 Sun Sun Fire T1000 0 Sun Sun Fire E6900 0 Sun Sun Fire E4900 0 Sun Sun Fire E2900 0 Sun Sun Fire E25000 0 Sun Sun Fire E20000 0 Sun Sun Fire B1600 Sun Sun Blade X8450 0 Sun Sun Blade X8440 0 Sun Sun Blade X8420 0 Sun Sun Blade X8400 0 Sun Sun Blade X8000 P 0 Sun Sun Blade X8000 0 Sun Sun Blade X6450 0 Sun Sun Blade X6440 M2 Sun Sun Blade X6275 M2 Sun Sun Blade X6275 0 Sun Sun Blade X6270 0 Sun Sun Blade X6250 0 Sun Sun Blade X6240 0 Sun Sun Blade X6220 0 Sun Sun Blade X6048 0 Sun Sun Blade X6000 0 Sun Sun Blade T6320 0 Sun Sun Blade T6300 0 Sun SPARC Enterprise T5440 Server 0 Sun SPARC Enterprise T5240 Server 0 Sun SPARC Enterprise T5220 Server 0 Sun SPARC Enterprise T5220 0 Sun SPARC Enterprise T5140 Server 0 Sun SPARC Enterprise T5120 Server 0 Sun SPARC Enterprise T5120 0 Sun SPARC Enterprise M5000 0 Sun SPARC Enterprise M4000 0 Sun Ray Server Software 3.1.1 Sun Ray Server Software 2.0 Sun Ray Server Software 1.3 Sun Ray Server Software 1.2 Sun Ray Server Software 4.2 Sun Ray Server Software 4.1 Sun Ray Server Software 4.0 Sun Ray Server Software 3.5 Sun Ray Server Software 3.1 Sun Ray Server Software 3.0 Sun OpenSSO Enterprise 8.0 Sun OpenSSO Enterprise 0 Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_74 Sun OpenSolaris build snv_71 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_56 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_48 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_35 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_28 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_151a Sun OpenSolaris build snv_151 Sun OpenSolaris build snv_137 Sun OpenSolaris build snv_136 Sun OpenSolaris build snv_135 Sun OpenSolaris build snv_134a Sun OpenSolaris build snv_134 Sun OpenSolaris build snv_133 Sun OpenSolaris build snv_132 Sun OpenSolaris build snv_131 Sun OpenSolaris build snv_130 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_129 Sun OpenSolaris build snv_128 Sun OpenSolaris build snv_127 Sun OpenSolaris build snv_126 Sun OpenSolaris build snv_125 Sun OpenSolaris build snv_124 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris Build Snv 111B Oracle Weblogic Server 10.3.3 Oracle Weblogic Server 10.3.2 Oracle Weblogic Server 10.3.1 Oracle Weblogic Server 10.3.4 Oracle Weblogic Server 10.3 Oracle Weblogic Server 10.1 Oracle Weblogic Server 10 Oracle Weblogic Portal 9.2 Oracle Weblogic Portal 10.3 Oracle Thesaurus Management System 4.6.2 Oracle Siebel CRM Core and Apps 8.1.1 Oracle PeopleSoft Enterprise PeopleTools 8.51 Oracle PeopleSoft Enterprise PeopleTools 8.50 Oracle PeopleSoft Enterprise PeopleTools 8.49 Oracle PeopleSoft Enterprise HRMS 9.1 Oracle PeopleSoft Enterprise HRMS 9.0 Oracle PeopleSoft Enterprise HRMS 8.9 Oracle Outside In 8.3.7 Oracle Outside In 8.3.5.0 Oracle Oracle11g Enterprise Edition 11.2.0.2.0 Oracle Oracle10g Standard Edition 10.2 .5 Oracle Oracle10g Standard Edition 10.2 .3 Oracle Oracle10g Standard Edition 10.2 .2 Oracle Oracle10g Standard Edition 10.1 .5 Oracle Oracle10g Personal Edition 10.2 .5 Oracle Oracle10g Personal Edition 10.2 .3 Oracle Oracle10g Personal Edition 10.2 .2 Oracle Oracle10g Personal Edition 10.2 .1 Oracle Oracle10g Enterprise Edition 11.2.0.2 Oracle Oracle Identity Management 10g 10.1.4 .3.0 Oracle Oracle Identity Management 10g 10.1.4 .0.1 Oracle Fusion Middleware 11.1.1.5.0 Oracle Fusion Middleware 11.1.1.4.0 Oracle Fusion Middleware 11.1.1.3.0 Oracle Enterprise Manager 11.1.0.1 Oracle Enterprise Manager 10.2.0.5 Oracle Enterprise Linux 5 Oracle E-Business Suite 12 12.1.2 Oracle E-Business Suite 12 12.0.6 Oracle E-Business Suite 12 12.1.3 Oracle CRM 8.0.0 Oracle Clinical Remote Data Capture 4.6.2 Oracle Clinical Remote Data Capture 4.6 Oracle Business Intelligence Enterprise Edition 11.1.1.5 Oracle Business Intelligence Enterprise Edition 11.1.1.3 Oracle Application Server 10.1.3.5.0 Oracle Application Server 10.1.2.3 Oracle Agile Product Supplier Collaboration for Process 6.0.0.4 Oracle Agile Product Supplier Collaboration for Process 6.0.0.3 Oracle Agile Product Supplier Collaboration for Process 6.0.0.2 Oracle Agile Product Supplier Collaboration for Process 5.2.2 |
| Not Vulnerable: | |
Discussion
RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
Oracle has released advance notification regarding the October 2011 Critical Patch Update (CPU) to be released on October 18, 2011. The update addresses 56 vulnerabilities affecting the following software:
Oracle Database Server
Oracle Fusion Middleware
Oracle E-Business Suite
Oracle Supply Chain
Oracle PeopleSoft
Oracle Siebel CRM
Oracle Industry Applications
Oracle Sun Products
Oracle Linux
Oracle Virtualization
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document the issues:
50194 Oracle Linux CVE-2011-2306 Oracle Validation Security Vulnerability
50197 Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
50198 Oracle Fusion Middleware CVE-2011-2320 Remote WebLogic Server Vulnerability
50199 Oracle Database CVE-2011-2301 Oracle Text Local Vulnerability
50201 Oracle Sun Solaris CVE-2011-3508 Remote Vulnerability
50202 Oracle Fusion Middleware CVE-2011-2314 Oracle Containers for J2EE Remote Vulnerability
50203 Oracle Database CVE-2011-3512 Remote Core RDBMS Vulnerability
50205 Oracle Fusion Middleware CVE-2011-2255 Remote Oracle WebLogic Portal Vulnerability
50206 Oracle Fusion Middleware CVE-2011-2319 Remote Oracle WebLogic Server Vulnerability
50207 Oracle Fusion Middleware CVE-2011-3541 Oracle Outside In Technology Local Vulnerability
50208 Oracle OpenSSO CVE-2011-3517 Remote Vulnerability
50209 Oracle Fusion Middleware CVE-2011-3523 Remote Oracle Web Services Manager Vulnerability
50210 Oracle Fusion Middleware CVE-2011-2318 Oracle WebLogic Server Local Vulnerability
50212 Oracle Fusion Middleware CVE-2011-2237 Remote Oracle Web Services Manager Vulnerability
50213 Oracle Fusion Middleware CVE-2011-3510 Remote Oracle Business Intelligence Enterprise Edition Vulner
50214 Oracle Sun Solaris CVE-2011-3543 Remote Vulnerability
50217 Oracle E-Business Suite CVE-2011-3513 Oracle Application Object Library Remote Vulnerability
50219 Oracle Database Server CVE-2011-3511 Remote Database Vault Vulnerability
50221 Oracle E-Business Suite CVE-2011-2302 Remote Oracle Application Object Library Vulnerability
50222 Oracle Database CVE-2011-2322 Remote Database Vault Vulnerability
50225 Oracle E-Business Suite CVE-2011-2303 Remote Oracle Application Object Library Vulnerability
50227 Oracle Supply Chain Products Suite CVE-2011-3532 Remote Oracle Agile Product Supplier Collaboration
50228 Oracle Waveset CVE-2011-2310 Remote Vulnerability
50230 Oracle Siebel CRM CVE-2011-3526 Remote Siebel Core - UIF Server Vulnerability
50232 Oracle E-Business Suite CVE-2011-2308 Oracle Application Object Library Remote Vulnerability
50233 Oracle E-Business Suite CVE-2011-3519 Remote Oracle Applications Framework Vulnerability
50235 Oracle Sun Solaris CVE-2011-3515 Local Vulnerability
50238 Oracle PeopleSoft CVE-2011-3530 PeopleSoft Enterprise HRMS Remote Vulnerability
50240 Oracle Industry Applications CVE-2011-2309 Remote Health Sciences - Oracle Clinical, Remote Data Cap
50241 Oracle PeopleSoft Products CVE-2011-3527 Remote PeopleSoft Enterprise HRMS Vulnerability
50244 Oracle Sun Solaris CVE-2011-3542 Local Vulnerability
50245 Oracle Industry Applications CVE-2011-3538 Remote Sun Ray Vulnerability
50247 Oracle PeopleSoft CVE-2011-3520 PeopleSoft Enterprise PeopleTools Remote Vulnerability
50249 Oracle PeopleSoft Products CVE-2011-3533 Remote PeopleSoft Enterprise HRMS Vulnerability
50251 Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability
50252 Oracle Sun Products Suite CVE-2011-3506 Remote Oracle OpenSSO Vulnerability
50253 Oracle PeopleSoft Products CVE-2011-3528 Remote PeopleSoft Enterprise HRMS Vulnerability
50254 Oracle Solaris CVE-2011-2313 Local Solaris Vulnerability
50255 Oracle Sun Solaris CVE-2011-3535 Remote Vulnerability
50256 Oracle Siebel CRM CVE-2011-3518 Siebel Core - UIF Client Remote Vulnerability
50257 Oracle Solaris CVE-2011-2304 Remote Vulnerability
50258 Oracle Sun Products CVE-2011-2327 Local Oracle Communications Unified Vulnerability
50259 Oracle Sun Product Suite CVE-2011-3537 Local Vulnerability
50260 Oracle Siebel CRM CVE-2011-2316 Siebel Apps - Marketing Remote Vulnerability
50261 Oracle Sun Products CVE-2011-3522 Local SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade Vulnerability
50262 Oracle Sun Products Suite CVE-2011-3536 Local Vulnerability
50263 Oracle PeopleSoft Products CVE-2011-2315 Remote PeopleSoft Enterprise PeopleTools Vulnerability
50264 Oracle Sun Products Suite CVE-2011-3507 Remote Oracle Communications Unified Vulnerability
50265 Oracle Sun Products Suite CVE-2011-2286 Remote Vulnerability
50266 Oracle Solaris CVE-2011-2311 ZFS Component Local Vulnerability
50267 Oracle PeopleSoft CVE-2011-3529 Remote PeopleSoft Enterprise HRMS Vulnerability
50268 Oracle Sun Products Suite CVE-2011-2292 Local Solaris Vulnerability
50269 Oracle Solaris CVE-2011-2312 'ZFS' Sub Component Local Vulnerability
50270 Oracle Solaris CVE-2011-3539 Local Solaris Vulnerability
Oracle has released advance notification regarding the October 2011 Critical Patch Update (CPU) to be released on October 18, 2011. The update addresses 56 vulnerabilities affecting the following software:
Oracle Database Server
Oracle Fusion Middleware
Oracle E-Business Suite
Oracle Supply Chain
Oracle PeopleSoft
Oracle Siebel CRM
Oracle Industry Applications
Oracle Sun Products
Oracle Linux
Oracle Virtualization
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
This BID is being retired. The following individual records exist to better document the issues:
50194 Oracle Linux CVE-2011-2306 Oracle Validation Security Vulnerability
50197 Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
50198 Oracle Fusion Middleware CVE-2011-2320 Remote WebLogic Server Vulnerability
50199 Oracle Database CVE-2011-2301 Oracle Text Local Vulnerability
50201 Oracle Sun Solaris CVE-2011-3508 Remote Vulnerability
50202 Oracle Fusion Middleware CVE-2011-2314 Oracle Containers for J2EE Remote Vulnerability
50203 Oracle Database CVE-2011-3512 Remote Core RDBMS Vulnerability
50205 Oracle Fusion Middleware CVE-2011-2255 Remote Oracle WebLogic Portal Vulnerability
50206 Oracle Fusion Middleware CVE-2011-2319 Remote Oracle WebLogic Server Vulnerability
50207 Oracle Fusion Middleware CVE-2011-3541 Oracle Outside In Technology Local Vulnerability
50208 Oracle OpenSSO CVE-2011-3517 Remote Vulnerability
50209 Oracle Fusion Middleware CVE-2011-3523 Remote Oracle Web Services Manager Vulnerability
50210 Oracle Fusion Middleware CVE-2011-2318 Oracle WebLogic Server Local Vulnerability
50212 Oracle Fusion Middleware CVE-2011-2237 Remote Oracle Web Services Manager Vulnerability
50213 Oracle Fusion Middleware CVE-2011-3510 Remote Oracle Business Intelligence Enterprise Edition Vulner
50214 Oracle Sun Solaris CVE-2011-3543 Remote Vulnerability
50217 Oracle E-Business Suite CVE-2011-3513 Oracle Application Object Library Remote Vulnerability
50219 Oracle Database Server CVE-2011-3511 Remote Database Vault Vulnerability
50221 Oracle E-Business Suite CVE-2011-2302 Remote Oracle Application Object Library Vulnerability
50222 Oracle Database CVE-2011-2322 Remote Database Vault Vulnerability
50225 Oracle E-Business Suite CVE-2011-2303 Remote Oracle Application Object Library Vulnerability
50227 Oracle Supply Chain Products Suite CVE-2011-3532 Remote Oracle Agile Product Supplier Collaboration
50228 Oracle Waveset CVE-2011-2310 Remote Vulnerability
50230 Oracle Siebel CRM CVE-2011-3526 Remote Siebel Core - UIF Server Vulnerability
50232 Oracle E-Business Suite CVE-2011-2308 Oracle Application Object Library Remote Vulnerability
50233 Oracle E-Business Suite CVE-2011-3519 Remote Oracle Applications Framework Vulnerability
50235 Oracle Sun Solaris CVE-2011-3515 Local Vulnerability
50238 Oracle PeopleSoft CVE-2011-3530 PeopleSoft Enterprise HRMS Remote Vulnerability
50240 Oracle Industry Applications CVE-2011-2309 Remote Health Sciences - Oracle Clinical, Remote Data Cap
50241 Oracle PeopleSoft Products CVE-2011-3527 Remote PeopleSoft Enterprise HRMS Vulnerability
50244 Oracle Sun Solaris CVE-2011-3542 Local Vulnerability
50245 Oracle Industry Applications CVE-2011-3538 Remote Sun Ray Vulnerability
50247 Oracle PeopleSoft CVE-2011-3520 PeopleSoft Enterprise PeopleTools Remote Vulnerability
50249 Oracle PeopleSoft Products CVE-2011-3533 Remote PeopleSoft Enterprise HRMS Vulnerability
50251 Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability
50252 Oracle Sun Products Suite CVE-2011-3506 Remote Oracle OpenSSO Vulnerability
50253 Oracle PeopleSoft Products CVE-2011-3528 Remote PeopleSoft Enterprise HRMS Vulnerability
50254 Oracle Solaris CVE-2011-2313 Local Solaris Vulnerability
50255 Oracle Sun Solaris CVE-2011-3535 Remote Vulnerability
50256 Oracle Siebel CRM CVE-2011-3518 Siebel Core - UIF Client Remote Vulnerability
50257 Oracle Solaris CVE-2011-2304 Remote Vulnerability
50258 Oracle Sun Products CVE-2011-2327 Local Oracle Communications Unified Vulnerability
50259 Oracle Sun Product Suite CVE-2011-3537 Local Vulnerability
50260 Oracle Siebel CRM CVE-2011-2316 Siebel Apps - Marketing Remote Vulnerability
50261 Oracle Sun Products CVE-2011-3522 Local SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade Vulnerability
50262 Oracle Sun Products Suite CVE-2011-3536 Local Vulnerability
50263 Oracle PeopleSoft Products CVE-2011-2315 Remote PeopleSoft Enterprise PeopleTools Vulnerability
50264 Oracle Sun Products Suite CVE-2011-3507 Remote Oracle Communications Unified Vulnerability
50265 Oracle Sun Products Suite CVE-2011-2286 Remote Vulnerability
50266 Oracle Solaris CVE-2011-2311 ZFS Component Local Vulnerability
50267 Oracle PeopleSoft CVE-2011-3529 Remote PeopleSoft Enterprise HRMS Vulnerability
50268 Oracle Sun Products Suite CVE-2011-2292 Local Solaris Vulnerability
50269 Oracle Solaris CVE-2011-2312 'ZFS' Sub Component Local Vulnerability
50270 Oracle Solaris CVE-2011-3539 Local Solaris Vulnerability
Exploit / POC
RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
Solution:
The vendor plans to release updates to address these issues on October 18th, 2011. Please see the references for more information.
Solution:
The vendor plans to release updates to address these issues on October 18th, 2011. Please see the references for more information.
References
RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
References:
References: