OSVDB ID: 31387

Title: Oracle PeopleSoft PeopleTools Unspecified Authenticated HTTP Remote Issue (PSE04)

Info

Disclosure

Oct 18, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Oct 17, 2006

Description

Classification

Location: Remote/Network Access Required
Attack Type: Unknown
Impact: Unknown
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Authentication Required, Web Related

Solution

Upgrade to version 8.46.16 or higher for the 8.46 line, 8.47.10 or higher for the 8.47 line, or 8.48.04 or higher for the 8.48 line, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Oracle Corporation	PeopleTools	8.48 GA
		8.47.04
		8.46.08
		8.46.14
		8.47.05
		8.46.09
		8.46.15
		8.48.01
		8.48.02
		8.47.06
		8.46.10
		8.47.07
		8.46.11
		8.48.03
		8.46 GA
		8.48.04
		8.46.01
		8.47.08
		8.46.12
		8.47.09
		8.46.13
		8.46.02
		8.46.03
		8.47 GA
		8.46.04
		8.46.05
		8.47.01
		8.46.06
		8.47.02
		8.47.03
		8.46.07

References

Security Tracker: 1017077
CVE ID: 2006-5376 (see also: NVD)
Bugtraq ID: 20588
Secunia Advisory ID: 22396
Related OSVDB ID: 31383 31384 31385 31386 31388 31389 31390 31391 31392 31393 31399 31407 31414 31462 31500
FrSIRT Advisory: ADV-2006-4065
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0360.html
News Article: http://news.com.com/Oracle+plugs+101+security+flaws/2100-1002_3-6126864.html
Other Advisory URL: http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
Vendor Specific Advisory URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct200 ......
Vendor Specific Solution URL: http://www.peoplesoft.com/media/en/pdf/psftoct06cpupreinstallnote.pdf
Keyword: PSE04

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Oracle Corporation

PeopleTools

References

Credit