CVE-2003-1116

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Ссылки

http://marc.info/?l=bugtraq&m=105012832418415&w=2
http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
Patch
Vendor Advisory
http://securitytracker.com/id?1006550
Patch
http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
http://www.kb.cert.org/vuls/id/168873
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/7325
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11768
http://marc.info/?l=bugtraq&m=105012832418415&w=2
http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
Patch
Vendor Advisory
http://securitytracker.com/id?1006550
Patch
http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
http://www.kb.cert.org/vuls/id/168873
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/7325
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11768

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:e-business_suite:10.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01287

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9v2m-gpwj-gcx7

github

почти 4 года назад