OSVDB ID: 31384

Title: Oracle PeopleSoft PeopleTools Unspecified Authenticated HTTP Complete Compromise

Info

Disclosure

Oct 18, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Oct 17, 2006

Description

Classification

Location: Remote/Network Access Required
Attack Type: Unknown
Impact: Unknown
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Upgrade to version 8.46.16 or higher for the 8.46 line, 8.47.10 or higher for the 8.47 line, or 8.48.04 or higher for the 8.48 line, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Oracle Corporation	PeopleTools	8.48 GA
		8.47.04
		8.46.08
		8.47.05
		8.46.09
		8.48.01
		8.48.02
		8.47.06
		8.46.10
		8.47.07
		8.46.11
		8.48.03
		8.46 GA
		8.46.01
		8.47.08
		8.46.12
		8.47.09
		8.46.13
		8.46.02
		8.46.03
		8.47 GA
		8.46.04
		8.46.05
		8.47.01
		8.46.06
		8.47.02
		8.47.03
		8.46.07
		8.46.14
		8.46.15

References

FrSIRT Advisory: ADV-2006-4065
Bugtraq ID: 20588
Related OSVDB ID: 31383 31385 31386 31387 31388 31389 31390 31391 31392 31393 31399 31407 31414 31462 31500
Other Advisory URL: http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct200 ......
Secunia Advisory ID: 22396
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0360.html
CVE ID: 2006-5375 (see also: NVD)
Vendor Specific Solution URL: http://www.peoplesoft.com/media/en/pdf/psftoct06cpupreinstallnote.pdf
Security Tracker: 1017077
News Article: http://news.com.com/Oracle+plugs+101+security+flaws/2100-1002_3-6126864.html
Keyword: PSE01

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Oracle Corporation

PeopleTools

References

Credit