RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

BID:54423

Info

RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

Bugtraq ID: 54423
Class: Unknown
CVE:
Remote: Yes
Local: Yes
Published: Jul 12 2012 12:00AM
Updated: Jul 23 2012 06:50AM
Credit: Oracle
Vulnerable:
Not Vulnerable:

Discussion

RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

Oracle has released advance notification regarding the July 2012 Critical Patch Update (CPU) to be released on July 17, 2012. The update addresses 88 vulnerabilities affecting the following software:

Oracle Database
Oracle Secure Backup
Oracle Fusion Middleware
Oracle Application Server
Oracle Identity Management
Hyperion BI+
Oracle JRockit
Oracle Map Viewer
Oracle Outside In Technology
Enterprise Manager Plugin for Database
Enterprise Manager Grid Control
Oracle E-Business Suite
Oracle Transportation Management
Oracle AutoVue
Oracle PeopleSoft Enterprise HRMS
Oracle PeopleSoft Enterprise PeopleTools
Oracle Siebel CRM
Oracle Clinical Remote Data Capture Option
Oracle Sun Product Suite
Oracle MySQL Server

Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.

This BID is being retired. The following individual records exist to better document the issues:

54543 Oracle Outside In Technology CVE-2012-1771 Remote Code Execution Vulnerability
54541 Oracle Outside In Technology CVE-2012-1770 Remote Code Execution Vulnerability
54497 Oracle Outside In Technology CVE-2012-1772 Remote Code Execution Vulnerability
54504 Oracle Outside In Technology CVE-2012-3107 Remote Code Execution Vulnerability
54546 Oracle Outside In Technology CVE-2012-3106 Remote Code Execution Vulnerability
54548 Oracle Outside In Technology CVE-2012-1773 Remote Code Execution Vulnerability
54500 Oracle Outside In Technology CVE-2012-1769 Remote Code Execution Vulnerability
54511 Oracle Outside In Technology CVE-2012-1767 Remote Code Execution Vulnerability
54536 Oracle Outside In Technology CVE-2012-1768 Remote Code Execution Vulnerability
54554 Oracle Outside In Technology CVE-2012-3109 Remote Code Execution Vulnerability
54531 Oracle Outside In Technology CVE-2012-1766 Remote Code Execution Vulnerability
54506 Oracle Outside In Technology CVE-2012-3110 Remote Code Execution Vulnerability
54550 Oracle Outside In Technology CVE-2012-3108 Remote Code Execution Vulnerability
54495 Oracle Portal CVE-2011-3562 Remote Security Vulnerability
54569 Oracle Enterprise Manager for Oracle Database CVE-2012-1737 Remote Security
54571 Oracle AutoVue CVE-2012-1758 Remote Oracle Security Vulnerability
54570 Oracle Transportation Management CVE-2012-3114 Remote Security Vulnerability
54568 Oracle Transportation Management CVE-2012-3117 Remote Security Vulnerability
54564 Oracle Sun Products Suite CVE-2012-3128 Local SPARC T-Series Servers Vulnerability
54567 Oracle Transportation Management CVE-2012-3116 Local Security Vulnerability
54563 Oracle Clinical Remote Data Capture Option CVE-2012-1743 Remote Security Vulnerability
54566 Oracle E-Business Suite CVE-2012-1739 Remote Security Vulnerability
54565 Oracle E-Business Suite CVE-2012-1727 Remote Security Vulnerability
54555 Oracle AutoVue CVE-2012-1759 Remote Security Vulnerability
54562 Oracle Sun Produts Suite CVE-2012-3122 Local Solaris Vulnerability
54561 Oracle E-Business Suite CVE-2012-1730 Remote Security Vulnerability
54560 Oracle Sun Products Suite CVE-2012-3131 Remote Solaris Vulnerability
54558 Oracle E-Business Suite CVE-2012-1715 Remote Security Vulnerability
54559 Oracle Sun Products Suite CVE-2012-3130 Remote Solaris Vulnerability
54518 Oracle Database Server CVE-2012-1747 Remote Network Layer Vulnerability
54557 Oracle Sun Products Suite CVE-2012-0563 Local Solaris Vulnerability
54556 Oracle Sun Products Suite CVE-2012-3112 Remote Solaris Vulnerability
54551 Oracle MySQL Server CVE-2012-0540 Remote Security Vulnerability
54549 Oracle MySQL Server CVE-2012-1735 Remote Security Vulnerability
54507 Oracle Database Server CVE-2012-1746 Remote Network Layer Vulnerability
54553 Oracle Sun Products Suite CVE-2012-3121 Remote Solaris Vulnerability
54547 Oracle MySQL Server CVE-2012-1689 Remote Security Vulnerability
54545 Oracle PeopleSoft Enterprise PeopleTools CVE-2012-1764 Remote Security Vulnerability
54552 Oracle Outside In Technology CVE-2012-1744 Local Security Vulnerability
54537 Oracle Sun Products Suite CVE-2012-1750 Local Solaris Vulnerability
54539 Oracle PeopleSoft Enterprise PeopleTools CVE-2012-1733 Remote Security Vulnerability
54544 Oracle PeopleSoft Enterprise PeopleTools CVE-2012-1753 Remote Security Vulnerability
54532 Oracle Sun Products Suite CVE-2012-1765 Local Solaris Vulnerability
54542 Oracle Siebel CRM CVE-2012-1754 Remote Security Vulnerability
54540 Oracle MySQL Server CVE-2012-1734 Remote Security Vulnerability
54538 Oracle Siebel CRM CVE-2012-1732 Remote Security Vulnerability
54530 Oracle Sun Products Suite CVE-2012-1752 Local Solaris Vulnerability
54534 Oracle PeopleSoft Enterprise PeopleTools CVE-2012-3118 Remote Security Vulnerability
54527 Oracle Oracle PeopleSoft Enterprise HRMS CVE-2012-1748 Remote Security Vulnerability
54528 Oracle Sun Products Suite CVE-2012-3124 Remote Solaris Vulnerability
54515 Oracle Sun Products Suite CVE-2012-1738 Remote Oracle iPlanet Web Server Vulnerability
54533 Oracle Siebel CRM CVE-2012-1761 Remote Security Vulnerability
54501 Oracle Database Server CVE-2012-1745 Remote Network Layer Vulnerability
54513 Oracle Sun Products Suite CVE-2012-3129 Remote Solaris Vulnerability
54517 Oracle Sun Products Suite CVE-2012-3123 Remote Solaris Vulnerability
54510 Oracle Sun Products Suite CVE-2012-3127 Remote Solaris Vulnerability
54520 Oracle Map Viewer CVE-2012-3115 Remote Security Vulnerability
54508 Oracle Sun Products Suite CVE-2012-1687 Local Solaris Vulnerability
54526 Oracle MySQL Server CVE-2012-1757 Remote Security Vulnerability
54505 Oracle Sun Products Suite CVE-2012-3126 Local Solaris Cluster Vulnerability
54502 Oracle Sun Products Suite CVE-2012-3125 Remote Solaris Vulnerability
54529 Oracle Siebel CRM CVE-2012-1760 Remote Security Vulnerability
54493 Oracle Sun Products Suite CVE-2012-3120 Remote Solaris Vulnerability
54523 Oracle PeopleSoft Enterprise HRMS CVE-2012-3119 Remote Security Vulnerability
54516 Oracle Map Viewer CVE-2012-1749 Remote Security Vulnerability
54524 Oracle MySQL Server CVE-2012-1756 Remote Security Vulnerability
54522 Oracle PeopleSoft Enterprise HRMS CVE-2012-3113 Remote Security Vulnerability
54514 Oracle MapViewer CVE-2012-1736 Remote Security Vulnerability
54496 Oracle Database Server CVE-2012-3134 Remote Core RDBMS Vulnerability
54521 Oracle Siebel CRM CVE-2012-1742 Remote Security Vulnerability
54519 Oracle Siebel CRM CVE-2012-1728 Remote Security Vulnerability
54512 Oracle Siebel CRM CVE-2012-1731 Remote Security Vulnerability
54503 Oracle PeopleSoft Enterprise CVE-2012-3111 Remote Security Vulnerability
54509 Oracle Hyperion CVE-2012-1729 Remote Security Vulnerability
54499 Oracle PeopleSoft Enterprise CVE-2012-1762 Remote PeopleSoft Enterprise PeopleTools Vulnerability
54498 Oracle Application Express CVE-2012-1740 Remote Security Vulnerability
54494 Oracle Fusion Middleware CVE-2012-3135 Remote Oracle JRockit Vulnerability
54492 Oracle Fusion Middleware CVE-2012-1741 Remote Enterprise Manager for Fusion Middleware Vulnerabilty

Exploit / POC

RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

Some of these issues may not require specific exploit code and may be trivial to exploit.

Solution / Fix

RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

Solution:
The vendor plans to release updates to address these issues on April 17, 2012. Please see the references for more information.

References

RETIRED: Oracle July 2012 Critical Patch Update Multiple Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report