Vulnerability Bulletins |
Oracle publica parche acumulativo |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Oracle Database Server 10g Release 1, 10.1.0.3, 10.1.0.4 Oracle9i Database Server Release 2, 9.2.0.5, 9.2.0.6, 9.2.0.7 Oracle8i Database Server Release 3, 8.1.7.4 Oracle Enterprise Manager 10g Grid Control, 10.1.0.3, 10.1.0.4 Oracle Application Server 10g Release 2, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2 Oracle Application Server 10g Release 1 (9.0.4), 9.0.4.1, 9.0.4.2 Oracle Collaboration Suite 10g Release 1, 10.1.1 Oracle9i Collaboration Suite Release 2, 9.0.4.2 Oracle E-Business Suite Release 11i, 11.5.1-11.5.10, 11.5.10 CU2 Oracle E-Business Suite Release 11.0 Oracle Clinical, 4.5.0, 4.5.1 PeopleSoft Enterprise Tools, 8.1-8.46.03 PeopleSoft CRM, 8.81-8.9 JD Edwards EnterpriseOne, OneWorld XE, 8.95_B1, 8.94_Q1, SP23_K1 |
Description |
|
|
Se ha publicado el parche acumulativo de Octubre para los siguientes productos de Oracle: Oracle Database Server, Enterprise Manager, Oracle Application Server y Oracle Collaboration Suite. Este parche soluciona múltiples vulnerabilidades que pueden comprometer la integridad, confidencialidad y disponibilidad de dichos productos asi como la información manejada por ellos. |
|
Solution |
|
|
Actualización de software Oracle Oracle Database Server http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=333956.1 Oracle Application Server http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=333959.1 Oracle Collaboration Suite http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=333961.1 Oracle E-Business Suite and Applications http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=333963.1 Oracle Enterprise Manager http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=333979.1 Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne http://www.peoplesoft.com/corp/en/support/security_index.jsp |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2005-0873 |
| BID | |
Other resources |
|
|
Oracle Critical Patch Update - October 2005 http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html red-database-security Security Details Oracle Critical Patch Update October 2005 - V1.00 http://www.red-database-security.com/advisory/details_oracle_cpu_october.html red-database-security Security Advisory (2005-S072E) http://www.red-database-security.com/advisory/oracle_workflow_css_wf_route.html red-database-security Security Advisory (2005-S071E) http://www.red-database-security.com/advisory/oracle_workflow_css_wf_monitor.html HP SECURITY BULLETIN (HPSBMA01235) http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01235 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-10-20 |
| 1.1 | Aviso emitido por HP (HPSBMA01235) | 2005-10-26 |