Oracle Products Multiple Remote Command Execution and SQL Injection Vulnerabilities
Description
Multiple vulnerabilities have been identified in various Oracle products, which could be exploited by remote or local attackers to cause a denial of service, execute arbitrary commands, read and overwrite arbitrary data, disclose sensitive information, conduct SQL injection and cross site scripting attacks, or bypass security restrictions.
The first issue is due to an input validation error in Oracle Database when handling certain parameters via XML DB, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
The second issue is due to an input validation error in the "DBMS_AQ_INV" package, which could be exploited by malicious people to inject and execute arbitrary SQL queries.
The third vulnerability is due to a buffer overflow error in the Oracle Notification Service (ONS) when processing malformed requests sent to port 6200/TCP, which could be exploited by remote unauthenticated attackers to execute arbitrary commands.
The fourth issue is due to an input validation error in Oracle Application Server when processing requests via the "EmChartBean" component, which could be exploited by remote unauthenticated attackers to access and read the contents of arbitrary files via directory traversal attacks.
The fifth vulnerability is due to an input validation error in Oracle Reports Web Cartridge (RWCGI60) when processing the "genuser" parameter script, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
Other unspecified vulnerabilities have also been identified in various components.
Vulnerable Products
Vulnerable Software: Oracle Database 10g Release 2 version 10.2.0.1Oracle Database 10g Release 2 version 10.2.0.2Oracle Database 10g Release 2 version 10.2.0.3Oracle Database 10g Release 1 version 10.1.0.3Oracle Database 10g Release 1 version 10.1.0.4Oracle Database 10g Release 1 version 10.1.0.5Oracle Identity Management 10g version 10.1.4.0.1Oracle Application Server 10g Release 3 version 10.1.3.0.0Oracle Application Server 10g Release 3 version 10.1.3.1.0Oracle Application Server 10g Release 2 versions 10.1.2.0.0 through 10.1.2.0.2Oracle Application Server 10g Release 2 version 10.1.2.1.0Oracle Application Server 10g Release 2 version 10.1.2.2.0Oracle Application Server 10g (9.0.4) version 9.0.4.2Oracle Application Server 10g (9.0.4) version 9.0.4.3Oracle Application Server 10g Release 1 (9.0.4) version 9.0.4.1Oracle E-Business Suite Release 11i versions 11.5.7 through 11.5.10 CU2Oracle E-Business Suite Release 11.0Oracle Enterprise Manager 10g Grid Control Release 2 version 10.2.0.1Oracle Enterprise Manager 10g Grid Control Release 1 version 10.1.0.4Oracle Enterprise Manager 10g Grid Control Release 1 version 10.1.0.5Oracle Enterprise Manager 10g Grid Control Release 1 version 10.1.0.3Oracle PeopleSoft Enterprise PeopleTools version 8.22Oracle PeopleSoft Enterprise PeopleTools version 8.47Oracle PeopleSoft Enterprise PeopleTools version 8.48Oracle Developer Suite, version 9.0.4.3Oracle Developer Suite, version 10.1.2.0.2Oracle Developer Suite, version 6iOracle8i Database Release 3 version 8.1.7.4Oracle9i Database Release 2 version 9.2.0.7Oracle9i Database Release 2 version 9.2.0.8Oracle9i Database Release 1 version 9.0.1.5Oracle9i Database Release 1 version 9.0.1.5 FIPSOracle9i Database Release 1 version 9.0.1.4Oracle9i Application Server Release 2 version 9.0.2.3Oracle9i Application Server Release 1 version 1.0.2.2Oracle9i Database Release 2 version 9.2.0.5Oracle9i Database Release 2 version 9.2.0.6
