Info

Disclosure

Jan 18, 2011

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jan 18, 2011

Description

Oracle Sun Convergence contains a flaw related to the 'Webmail' component that may allow a remote attacker to disclose and manipulate certain data. No further details have been provided.

Classification

Location: Remote / Network Access
Attack Type: Attack Type Unknown
Impact: Loss of Confidentiality, Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability.

Products

Oracle Corporation

Sun Convergence

1.0

References

CVE ID: 2010-4464 (see also: NVD)
Secunia Advisory ID: 42987
Bugtraq ID: 45887
VUPEN Advisory: ADV-2011-0154
News Article: http://www.computerworld.com/s/article/9205121/Oracle_plans_to_release_66_patches_on_Tuesday
Vendor Specific News/Changelog Entry: http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/70592