Oracle製品

ソフト名：Oracle Database 10g 10.1.0.5 Release 1/10g 10.2.0.3 Release 2/11g 11.1.0.7 Release 1/11g 11.2.0.1 Release 2, Oracle Database Server, Oracle Application Server 10g 10.1.2.3.0 R2/10g 10.1.3.5.0 R3, Oracle Fusion Middleware 11g 11.1.1.2.0 R1, Oracle Identity Management 10g 10.1.4.3, Oracle Fusion BI Publisher 10.1.3.3.2 R1/10.1.3.4.1 R1, Oracle E-Business Suite 11i 11.5.10.2/12.0.6/12.1.2, Oracle Peoplesoft Enterprise 8.81/8.9/9.0/9.1, Oracle PeopleSoft Enterprise PeopleTools 8.49/8.5, Oracle Siebel Core 7.7～8.1, Oracle Primavera P6 Enterprise Project Portfolio Management 6.21.3.0/7.0.1.0, Oracle Solaris 8～10, Oracle OpenSolaris, Oracle Communications Messaging Server 6.0～7.0, Oracle Sun Convergence 1 1.0/1.7.0, Oracle iPlanet Web Server 6.1/7.0/7.0u8, Oracle Sun Java System Identity Manager 8.1, Oracle Directory Server 6.0～6.3 Enterprise, Oracle Explorer 6.4, OracleVM 2.2.1
回避策：Critical Patch Update Advisory - October 2010にて対応
脆弱性：特定されていない脆弱性
ソース：http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
http://www.exploit-db.com/exploits/15245/
http://www.securityfocus.com/bid/43933
http://www.securityfocus.com/bid/43940
http://www.securityfocus.com/bid/43942
http://www.securityfocus.com/bid/43943
http://www.securityfocus.com/bid/43944
http://www.securityfocus.com/bid/43945
http://www.securityfocus.com/bid/43946
http://www.securityfocus.com/bid/43947
http://www.securityfocus.com/bid/43948
http://www.securityfocus.com/bid/43949
http://www.securityfocus.com/bid/43950
http://www.securityfocus.com/bid/43951
http://www.securityfocus.com/bid/43952
http://www.securityfocus.com/bid/43953
http://www.securityfocus.com/bid/43954
http://www.securityfocus.com/bid/43956
http://www.securityfocus.com/bid/43958
http://www.securityfocus.com/bid/43959
http://www.securityfocus.com/bid/43961
http://www.securityfocus.com/bid/43962
http://www.securityfocus.com/bid/43963
http://www.securityfocus.com/bid/43964
http://www.securityfocus.com/bid/43966
http://www.securityfocus.com/bid/43967
http://www.securityfocus.com/bid/43968
http://www.securityfocus.com/bid/43969
http://www.securityfocus.com/bid/43970
http://www.securityfocus.com/bid/43972
http://www.securityfocus.com/bid/43973
http://www.securityfocus.com/bid/43974
http://www.securityfocus.com/bid/43975
http://www.securityfocus.com/bid/43976
http://www.securityfocus.com/bid/43977
http://www.securityfocus.com/bid/43978
http://www.securityfocus.com/bid/43980
http://www.securityfocus.com/bid/43981
http://www.securityfocus.com/bid/43982
http://www.securityfocus.com/bid/43983
http://www.securityfocus.com/bid/43984
http://www.securityfocus.com/bid/43987
http://www.securityfocus.com/bid/43989
http://www.securityfocus.com/bid/43990
http://www.securityfocus.com/bid/43991
http://www.securityfocus.com/bid/43993
http://www.securityfocus.com/bid/43995
http://www.securityfocus.com/bid/43996
http://www.securityfocus.com/bid/43997
http://www.securityfocus.com/bid/44000
http://www.securityfocus.com/bid/44001
http://www.securityfocus.com/bid/44042
http://www.securityfocus.com/bid/44003
http://www.securityfocus.com/bid/44004
http://www.securityfocus.com/bid/44005
http://www.securityfocus.com/bid/44006
http://www.securityfocus.com/bid/44007
http://www.securityfocus.com/bid/44010
http://www.securityfocus.com/bid/44015
http://www.securityfocus.com/bid/44018
http://www.securityfocus.com/bid/44019
http://www.securityfocus.com/bid/44022
http://www.securityfocus.com/bid/44025
http://www.securityfocus.com/bid/44029
http://www.securityfocus.com/bid/44031
http://www.securityfocus.com/bid/44033
http://www.securityfocus.com/bid/44034
http://www.securityfocus.com/bid/44036
http://www.securityfocus.com/bid/44039
http://www.securityfocus.com/bid/44041
http://www.securityfocus.com/bid/44043
http://www.securityfocus.com/bid/44044
http://www.securityfocus.com/bid/44045
http://www.securityfocus.com/bid/44046
http://www.securityfocus.com/bid/44047
http://www.securityfocus.com/bid/44049
http://www.securityfocus.com/bid/44064
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2389
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2390
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2395
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2404
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2405
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2413
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2414
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2416
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2418
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2419
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3501
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3502
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3503
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3504
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3506
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3507
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3508
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3509
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3511
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3512
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3513
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3514
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3515
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3516
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3517
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3518
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3519
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3520
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3521
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3522
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3523
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3524
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3525
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3526
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3527
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3528
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3529
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3530
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3531
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3532
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3533
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3534
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3535
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3536
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3538
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3539
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3540
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3544
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3545
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3564
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3575
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3576
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3577
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3578
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3579
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3580
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3581
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3582
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3584
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3585
http://secunia.com/advisories/39504
http://secunia.com/advisories/41758
http://secunia.com/advisories/41762
http://secunia.com/advisories/41780
http://secunia.com/advisories/41783
http://secunia.com/advisories/41794
http://secunia.com/advisories/41815
http://secunia.com/advisories/41827
http://secunia.com/advisories/41828
http://secunia.com/advisories/41829
http://secunia.com/advisories/41830
http://secunia.com/advisories/41831
http://secunia.com/advisories/41832
http://secunia.com/advisories/41833
http://secunia.com/advisories/41834
http://secunia.com/advisories/41835
http://secunia.com/advisories/41836
http://secunia.com/advisories/41837
http://www.vupen.com/english/advisories/2010/2643
http://www.vupen.com/english/advisories/2010/2644
http://www.vupen.com/english/advisories/2010/2645
http://www.vupen.com/english/advisories/2010/2646
http://www.vupen.com/english/advisories/2010/2647
http://www.vupen.com/english/advisories/2010/2648
http://www.vupen.com/english/advisories/2010/2654
http://www.vupen.com/english/advisories/2010/2655
http://www.vupen.com/english/advisories/2010/2656
http://www.vupen.com/english/advisories/2010/2657
http://www.vupen.com/english/advisories/2010/2658
http://www.vupen.com/english/advisories/2010/2659
CVE：CVE-2010-2388, CVE-2010-2389, CVE-2010-2390, CVE-2010-2391, CVE-2010-2395, CVE-2010-2404, CVE-2010-2405, CVE-2010-2406, CVE-2010-2407, CVE-2010-2408, CVE-2010-2409, CVE-2010-2410, CVE-2010-2411, CVE-2010-2412, CVE-2010-2413, CVE-2010-2414, CVE-2010-2415, CVE-2010-2416, CVE-2010-2418, CVE-2010-2419, CVE-2010-3500, CVE-2010-3501, CVE-2010-3502, CVE-2010-3503, CVE-2010-3504, CVE-2010-3506, CVE-2010-3507, CVE-2010-3508, CVE-2010-3509, CVE-2010-3511, CVE-2010-3512, CVE-2010-3513, CVE-2010-3514, CVE-2010-3515, CVE-2010-3516, CVE-2010-3517, CVE-2010-3518, CVE-2010-3519, CVE-2010-3520, CVE-2010-3521, CVE-2010-3522, CVE-2010-3523, CVE-2010-3524, CVE-2010-3525, CVE-2010-3526, CVE-2010-3527, CVE-2010-3528, CVE-2010-3529, CVE-2010-3530, CVE-2010-3531, CVE-2010-3532, CVE-2010-3533, CVE-2010-3534, CVE-2010-3535, CVE-2010-3536, CVE-2010-3537, CVE-2010-3538, CVE-2010-3539, CVE-2010-3540, CVE-2010-3542, CVE-2010-3544, CVE-2010-3545, CVE-2010-3546, CVE-2010-3547, CVE-2010-3564, CVE-2010-3575, CVE-2010-3576, CVE-2010-3577, CVE-2010-3578, CVE-2010-3579, CVE-2010-3580, CVE-2010-3581, CVE-2010-3582, CVE-2010-3583, CVE-2010-3584, CVE-2010-3585
危険性：High Risk

Oracle, Sun Products

ソフト名：Oracle Database 9i～11g, Oracle Identity Management 10g, Oracle Application Server 10g, Oracle Collaboration Suite 10.1.2.4, Oracle E-Business Suite Release 11.5.10.2～12 12.1.2, Oracle Agile - Engineering Data Management 6.1.1.0, Oracle Transportation Manager 5.5.05.07～6.0.03, Oracle PeopleSoft Enterprise PeopleTools 8.49/8.5, Oracle Communications Unified Inventory Management 7.1, Oracle Clinical Remote Data Capture Option 4.5.3, Oracle Thesaurus Management System 4.5.2～4.6.1, Oracle Retail Markdown Optimization 13.1, Oracle Retail Place In-Season 12.2, Oracle Retail Plan In-Season 12.2, Oracle Sun Product Suite
回避策：あり
脆弱性：特定されていない脆弱性, セキュリティの強度不足, リモート攻撃
ソース：http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html
http://sunsolve.sun.com/search/document.do?assetkey=1-66-242386-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-248666-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-263689-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-267568-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-274590-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-276130-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-276630-1
http://www.securityfocus.com/bid/39333
http://www.securityfocus.com/bid/39418
http://www.securityfocus.com/bid/39420
http://www.securityfocus.com/bid/39421
http://www.securityfocus.com/bid/39422
http://www.securityfocus.com/bid/39423
http://www.securityfocus.com/bid/39424
http://www.securityfocus.com/bid/39425
http://www.securityfocus.com/bid/39426
http://www.securityfocus.com/bid/39427
http://www.securityfocus.com/bid/39428
http://www.securityfocus.com/bid/39429
http://www.securityfocus.com/bid/39430
http://www.securityfocus.com/bid/39431
http://www.securityfocus.com/bid/39432
http://www.securityfocus.com/bid/39433
http://www.securityfocus.com/bid/39434
http://www.securityfocus.com/bid/39435
http://www.securityfocus.com/bid/39436
http://www.securityfocus.com/bid/39437
http://www.securityfocus.com/bid/39438
http://www.securityfocus.com/bid/39439
http://www.securityfocus.com/bid/39440
http://www.securityfocus.com/bid/39441
http://www.securityfocus.com/bid/39442
http://www.securityfocus.com/bid/39443
http://www.securityfocus.com/bid/39444
http://www.securityfocus.com/bid/39445
http://www.securityfocus.com/bid/39446
http://www.securityfocus.com/bid/39447
http://www.securityfocus.com/bid/39448
http://www.securityfocus.com/bid/39450
http://www.securityfocus.com/bid/39451
http://www.securityfocus.com/bid/39452
http://www.securityfocus.com/bid/39453
http://www.securityfocus.com/bid/39454
http://www.securityfocus.com/bid/39455
http://www.securityfocus.com/bid/39456
http://www.securityfocus.com/bid/39457
http://www.securityfocus.com/bid/39458
http://www.securityfocus.com/bid/39459
http://www.securityfocus.com/bid/39460
http://www.securityfocus.com/bid/39461
http://www.securityfocus.com/bid/39462
http://www.securityfocus.com/bid/39464
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0086
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0851
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0852
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0853
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0854
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0855
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0856
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0859
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0860
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0861
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0865
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0866
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0871
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0872
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0874
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0875
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0876
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0877
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0878
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0879
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0880
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0881
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0882
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0883
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0884
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0885
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0887
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0888
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0889
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0890
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0891
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0893
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0894
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0895
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0896
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0897
http://secunia.com/advisories/39139
http://secunia.com/advisories/39257
http://secunia.com/advisories/39339
http://secunia.com/advisories/39429
http://secunia.com/advisories/39431
http://secunia.com/advisories/39432
http://secunia.com/advisories/39433
http://secunia.com/advisories/39434
http://secunia.com/advisories/39435
http://secunia.com/advisories/39436
http://secunia.com/advisories/39438
http://secunia.com/advisories/39439
http://secunia.com/advisories/39440
http://secunia.com/advisories/39441
http://secunia.com/advisories/39442
http://secunia.com/advisories/39443
CVE：CVE-2010-0086, CVE-2010-0851, CVE-2010-0852, CVE-2010-0853, CVE-2010-0854, CVE-2010-0855, CVE-2010-0856, CVE-2010-0857, CVE-2010-0858, CVE-2010-0859, CVE-2010-0860, CVE-2010-0861, CVE-2010-0862, CVE-2010-0863, CVE-2010-0864, CVE-2010-0865, CVE-2010-0866, CVE-2010-0867, CVE-2010-0868, CVE-2010-0869, CVE-2010-0870, CVE-2010-0871, CVE-2010-0872, CVE-2010-0874, CVE-2010-0875, CVE-2010-0876, CVE-2010-0877, CVE-2010-0878, CVE-2010-0879, CVE-2010-0880, CVE-2010-0881, CVE-2010-0882, CVE-2010-0883, CVE-2010-0884, CVE-2010-0885, CVE-2010-0887, CVE-2010-0888, CVE-2010-0889, CVE-2010-0890, CVE-2010-0891, CVE-2010-0893, CVE-2010-0894, CVE-2010-0895, CVE-2010-0896, CVE-2010-0897
危険性：Medium Risk