Oracle AOL/J Setup Test Suite Information Disclosure Vulnerability

Bugtraq ID:	8268
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2003 12:00AM
Updated:	Jul 24 2003 12:00AM
Credit:	Vulnerability discovery credited to Stephen Kost.
Vulnerable:	Oracle E-Business Suite 11i 11.8 Oracle E-Business Suite 11i 11.7 Oracle E-Business Suite 11i 11.6 Oracle E-Business Suite 11i 11.5 Oracle E-Business Suite 11i 11.4 Oracle E-Business Suite 11i 11.3 Oracle E-Business Suite 11i 11.2 Oracle E-Business Suite 11i 11.1 Oracle Applications 11.0 Oracle Applications 10.7
Not Vulnerable:

Oracle AOL/J Setup Test Suite Information Disclosure Vulnerability

A problem has been reported in the access control mechanisms of Oracle E-Business Suite. Because of this, an attacker may be able to remotely gain access to potentially sensitive information.

Oracle AOL/J Setup Test Suite Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Oracle AOL/J Setup Test Suite Information Disclosure Vulnerability

Solution:
Oracle has made fixes available. To access fixes, visit http://metalink.oracle.com and input patch number 2939083. For more information, see referenced advisory.

Oracle AOL/J Setup Test Suite Information Disclosure Vulnerability

References:

• Oracle E-Business Suite AOL/J Setup Test Information Disclosure (Integrigy Security)
  
• Unauthorized Disclosure of Information in Oracle E-Business Suite Alert #55 (Oracle)