Vulnerability Bulletins |
Oracle publica parche acumulativo de Octubre 2009 |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Integridad |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Oracle Database 11g, version 11.1.0.6, 11.1.0.7 Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4 Oracle Database 10g, version 10.1.0.5 Oracle Database 9i Release 2, versions 9.2.0.8, 9.2.0.8DV Oracle Application Server 10g Release 2 (10.1.2), version 10.1.2.3.0 Oracle Application Server 10g Release 3 (10.1.3), versions 10.1.3.3.0, 10.1.3.4.0 Oracle Identity Management 10g, version 10.1.4.0.1, 10.1.4.2.0, 10.1.4.3.0 Oracle E-Business Suite Release 12, version 12.1 Oracle E-Business Suite Release 12, version 12.0.6 Oracle E-Business Suite Release 11i, version 11.5.10.2 Oracle Enterprise Manager Database Control 11, version 11.1.0.6, 11.1.0.7 Oracle Enterprise Manager Grid Control 10g Release 4, version 10.2.0.4 PeopleSoft Enterprise PeopleTools versions: 8.49 PeopleSoft Enterprise HRMS versions: 8.9 and 9.0 Siebel Highly Interactive Client versions: 7.5.3, 7.7.2, 7.8, 8.0, 8.1 Oracle WebLogic Server 10.3, 10.0MP1 Oracle WebLogic Server 9.0 GA, 9.1 GA, 9.2 through 9.2 MP3 Oracle WebLogic Server 8.1 through 8.1 SP6 Oracle WebLogic Server 7.0 through 7.0 SP7 Oracle Complex Event Processing 10.3 and WebLogic Event Server 2.0 Oracle JRockit R27.6.3 and earlier (JDK/JRE 6, 5, 1.4.2) |
Description |
|
|
Se ha publicado el parche acumulativo de octubre de 2009 para los siguientes productos de Oracle: Oracle Database, Oracle Application Server, Oracle Identity Management, Oracle E-Business Suite, Oracle Enterprise Manager Database Control, Oracle PeopleSoft Enterprise PeopleTools y BEA. Este parche soluciona múltiples vulnerabilidades que pueden comprometer la integridad, confidencialidad y disponibilidad de dichos productos asi como la información manejada por ellos. |
|
Solution |
|
|
Actualización de software Oracle Ver tabla de actualizaciones en: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2009-1992 CVE-2009-1979 CVE-2009-1985 CVE-2009-1007 CVE-2009-1994 CVE-2009-2001 CVE-2009-1993 CVE-2009-1018 CVE-2009-1964 CVE-2009-1965 CVE-2009-1997 CVE-2009-2000 CVE-2009-1995 CVE-2009-1991 CVE-2009-1971 CVE-2009-1972 CVE-2009-1999 CVE-2009-3407 CVE-2009-1990 CVE-2009-3400 CVE-2009-3392 CVE-2009-3408 CVE-2009-3395 CVE-2009-3393 CVE-2009-3397 CVE-2009-3402 CVE-2009-3401 |
| BID | |
Other resources |
|
|
Oracle Critical Patch Update - Octubre 2009 http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-11-10 |