int(3519)

Vulnerability Bulletins


Oracle publica parche acumulativo de Octubre 2007

Vulnerability classification

Property Value
Confidence level Oficial
Impact Integridad
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio exotico

System information

Property Value
Affected manufacturer Comercial Software
Affected software Oracle Database 10g Release 2, versions 10.2.0.2, 10.2.0.3
Oracle Database 10g, version 10.1.0.5
Oracle Database 9i Release 2, versions 9.2.0.8, 9.2.0.8DV
Oracle Application Server 10g Release 3 (10.1.3), versions 10.1.3.0.0, 10.1.3.1.0, 10.1.3.2.0, 10.1.3.3.0
Oracle Application Server 10g Release 2 (10.1.2), versions 10.1.2.0.1 - 10.1.2.0.2, 10.1.2.1.0, 10.1.2.2.0
Oracle Application Server 10g (9.0.4), version 9.0.4.3
Oracle Collaboration Suite 10g, version 10.1.2
Oracle E-Business Suite Release 12, versions 12.0.0 - 12.0.3
Oracle E-Business Suite Release 11i, versions 11.5.8 - 11.5.10 CU2
Oracle Enterprise Manager Database Control 10g Release 2, versions 10.2.0.2, 10.2.0.3
Oracle Enterprise Manager Database Control 10g Release 1, version 10.1.0.5
Oracle Enterprise Manager Grid Control 10g Release 1, versions 10.1.0.5, 10.1.0.6
Oracle PeopleSoft Enterprise PeopleTools versions 8.22, 8.47, 8.48, 8.49
Oracle PeopleSoft Enterprise Human Capital Management versions 8.9, 9.0
Oracle Database 9i, version 9.0.1.5 FIPS+
Oracle Application Server 9i Release 1, version 1.0.2.2

Description

Se ha publicado el parche acumulativo de Abril de 2007 para los siguientes productos de Oracle: Oracle Database, Oracle Application Server,Oracle Collaboration Suite, Oracle E-Business Suite, Oracle Enterprise Manager Database Control, Oracle Enterprise Manager Grid Control, Oracle PeopleSoft Enterprise PeopleTools, Oracle PeopleSoft Enterprise Human Capital Management.

Este parche soluciona múltiples vulnerabilidades que pueden comprometer la integridad, confidencialidad y disponibilidad de dichos productos así como la información manejada por ellos.

Solution



Actualización de software

Oracle
Oracle Database
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=455287.1#DBAVAIL
Oracle Application Server
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=455287.1#ASMIDTIER
Oracle Collaboration Suite
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=455287.1#OCSAVAIL
Oracle E-Business Suite and Applications
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=455294.1
Oracle Enterprise Manager
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=455287.1#DBAVAIL
Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne
http://www.peoplesoft.com/corp/en/support/security_index.jsp

Standar resources

Property Value
CVE
BID

Other resources

Oracle Critical Patch Update - October 2007
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2007.html

Version history

Version Comments Date
1.0 Aviso emitido 2007-10-23
Ministerio de Defensa
CNI
CCN
CCN-CERT