BID:7325

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Info

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Bugtraq ID:	7325
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2003 12:00AM
Updated:	Apr 11 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Stephen Kost of Integrigy Corporation.
Vulnerable:	Oracle E-Business Suite 11i 11.8 Oracle E-Business Suite 11i 11.7 Oracle E-Business Suite 11i 11.6 Oracle E-Business Suite 11i 11.5 Oracle E-Business Suite 11i 11.4 Oracle E-Business Suite 11i 11.3 Oracle E-Business Suite 11i 11.2 Oracle E-Business Suite 11i 11.1 Oracle E-Business Suite 11.0 Oracle E-Business Suite 10.7 Oracle Applications 11.0 Oracle Applications 10.7

Not Vulnerable:

Exploit / POC

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Solution:
The vendor has released patches that address this issue. Users have been advised to upgrade with the relevant patch. Users of Applications Desktop Integrator (ADI) are required to install an additional patch #2778660. See attached security alert (Oracle Security Alert #53) for further upgrade details.

Oracle Applications 11.0