Oracle Application Server, Oracle Fusion Middleware

ソフト名：Oracle Application Server 10g(10.1.2.3.0/10.1.3.5.0), Oracle Fusion Middleware 11g (11.1.1.3.0/11.1.1.4.0/11.1.1.5.0) (Apache 2.2.19)

回避策：あり

脆弱性：DoS攻撃, 不正HTTPのリクエスト, メモリの浪費

ソース：

http://www.oracle.com/us/products/middleware/application-server/index.html?origref=http://secunia.com/advisories/product/3190/

http://www.oracle.com/technetwork/middleware/fusion-middleware/overview/index.html

http://blogs.oracle.com/security/entry/security_alert_for_cve_2011

http://www.oracle.com/technetwork/topics/security/alert-cve-2011-3192-485304.html

http://secunia.com/advisories/45606/

http://secunia.com/advisories/46000/

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2011-3192

危険性：Medium Risk

Oracle Application Server

ソフト名：Oracle Application Server 10g Release 2, version 10.1.2.3.0/10g Release 3, version 10.1.3.5.0

回避策：アップデートにて対応

脆弱性：データ操作, DoS攻撃, システムアクセス, リモートコード実行, 不特定のエラー

ソース：http://www.oracle.com/us/products/middleware/application-server/index.html?origref=http://secunia.com/advisories/product/3190/

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html#AppendixAS

http://secunia.com/advisories/45274/

http://secunia.com/advisories/45282/

http://secunia.com/advisories/45270/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0883

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0884

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2231

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2232

CVE：CVE-2011-0883, CVE-2011-0884, CVE-2011-2231, CVE-2011-2232

危険性：Medium Risk

Oracle Application Server, Oracle Fusion Middleware

ソフト名：Oracle Application Server 10g 2 version 10.1.2.3.0/Release 3 version 10.1.3.5.0, Oracle Fusion Middleware 11g 11.1.1.2.0/11.1.1.3.0/11.1.1.4.0

回避策：あり

脆弱性：データ操作, 未特定のエラー, TLSプロトコルエラー, マンインミドル攻撃, テキスト挿入

ソース：http://www.oracle.com/technetwork/middleware/fusion-middleware/overview/index.html

http://www.oracle.com/us/products/middleware/application-server/index.html?origref=http://secunia.com/advisories/product/3190/

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html#AppendixAS

http://secunia.com/advisories/37291/

http://secunia.com/advisories/44246/

http://secunia.com/advisories/44293/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0785

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0789

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0795

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0798

CVE：CVE-2009-3555, CVE-2011-0785, CVE-2011-0789, CVE-2011-0795, CVE-2011-0798

危険性：Medium Risk

Oracle Application Server, Oracle Fusion Middleware

ソフト名：Oracle Application Server 10g Release 2 version 10.1.2.3.0, Oracle Fusion Middleware 11g Release 1 version 11.1.1.2.0/11.1.1.3.0
回避策：あり
脆弱性：データ操作, 機密情報の奪取
ソース：http://www.oracle.com/us/products/middleware/application-server/index.htm
http://www.oracle.com/technetwork/middleware/fusion-middleware/overview/index.html
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3588
CVE：CVE-2010-3588
危険性：Medium Risk

Oracle Application Server

ソフト名：Oracle Application Server 10g 10.1.2.3.0 R2
回避策：Oracle Critical Patch Update Advisory - October 2010にて対応
脆弱性：特定されていない脆弱性
ソース：http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
http://www.securityfocus.com/bid/43941
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2396
http://secunia.com/advisories/41762
http://www.vupen.com/english/advisories/2010/2643
CVE：CVE-2010-2396
危険性：Medium Risk