Oracle Security Alerts http://www.oracle.com/technology/deploy/security/alerts.htm Security Alerts Issued by Oracle Copyright 2008 Oracle. All Rights Reserved. otnfeedback_us@oracle.com Tue, 14 Apr 2009 15:43:37 PDT FeedMe, by the Nowhere Man (http://thenowhereman.com/hacks) Critical Patch Update - April 2009 Tue, 14 Apr 2009 15:40:58 PDT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2009.html 1239748858 Critical Patch Update - January 2009 Tue, 14 Apr 2009 15:40:50 PDT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2009.html 1239748850 Critical Patch Update - October 2008 Wed, 15 Oct 2008 18:53:46 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2008.html 1224096826 Critical Patch Update - July 2008 Tue, 15 Jul 2008 20:01:17 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2008.html 1216152077 Critical Patch Update - April 2008 Tue, 15 Apr 2008 22:13:44 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2008.html 1208297624 Critical Patch Update - January 2008 Tue, 15 Jan 2008 22:55:07 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2008.html 1200437707 Critical Patch Update - October 2007 Tue, 16 Oct 2007 20:47:15 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2007.html 1192567635 Critical Patch Update - July 2007 Tue, 17 Jul 2007 20:21:34 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2007.html 1184703694 Critical Patch Update - April 2007 Wed, 18 Apr 2007 15:57:25 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html 1176911845 Critical Patch Update - January 2007 Tue, 16 Jan 2007 23:35:52 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html 1168990552 Critical Patch Update - October 2006 Tue, 17 Oct 2006 18:37:45 GMT http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html 1161110265 Critical Patch Update - April 2006 Tue, 18 Apr 2006 20:42:18 GMT http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html 1145392938 Critical Patch Update - January 2006 Wed, 18 Jan 2006 00:20:10 GMT http://www.oracle.com/technology/deploy/security/alerts.htm 1137543610 Critical Patch Update - October 2005 Tue, 18 Oct 2005 22:25:52 GMT http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html 1129674352 Critical Patch Update - July 2005 Tue, 12 Jul 2005 19:46:55 GMT http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html 1121197615 Critical Patch Update - April 2005 Tue, 18 Oct 2005 22:28:17 GMT http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf 1129674497 Critical Patch Update - January 2005 Tue, 18 Oct 2005 22:28:22 GMT http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf 1129674502 Unauthorized Access Vulnerabilities in Oracle E-Business Suite Mon, 02 Aug 2004 16:40:00 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert67.pdf 1091464800 Alert #67, Rev 1, 3 June 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Security Vulnerabilities in Oracle Application Server Web Cache Mon, 02 Aug 2004 16:39:29 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert66.pdf 1091464769 Alert #66, Rev 2, 2 April 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Security Vulnerability in Oracle9i Application and Database Servers Mon, 02 Aug 2004 16:38:48 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert65.pdf 1091464728 Alert #65, Rev 4, 2 June 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Security Vulnerabilities in Oracle9i Database Server Mon, 02 Aug 2004 16:38:10 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert64.pdf 1091464690 Alert #64, Rev 2, 20 May 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Security Vulnerabilities in Oracle9i Lite Mon, 02 Aug 2004 16:37:32 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert63.pdf 1091464652 Alert #63, Rev 1, 18 February 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. SSL Update for CERT CA-2003-26 and Older SSL Issues Mon, 02 Aug 2004 16:36:50 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert62.pdf 1091464610 Alert #62, Rev 1, 04 December 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. SQL Injection Vulnerability in Oracle9i Application Server Mon, 02 Aug 2004 16:36:07 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert61.pdf 1091464567 Alert #61, Rev 3, 13 November 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Unauthorized Access to Restricted Content in Oracle Files Mon, 02 Aug 2004 16:35:37 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert60.pdf 1091464537 Alert #60, Rev 1, 28 October 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in Oracle Database Server Binaries Mon, 02 Aug 2004 16:35:08 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert59.pdf 1091464508 Alert #59, Rev 3, 13 November 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in the XML Database of Oracle9i Database Server Mon, 02 Aug 2004 16:34:31 GMT http://www.oracle.com/technology/deploy/security/pdf/2003Alert58.pdf 1091464471 Alert #58, Rev 1, 18 August 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflows in EXTPROC of Oracle Database Server Mon, 02 Aug 2004 16:33:56 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert57.pdf 1091464436 Alert #57, Rev 2, 07August 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow Vulnerability in Oracle E-Business Suite Mon, 02 Aug 2004 16:33:20 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert56.pdf 1091464400 Alert #56, Rev 1, 23 July 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Unauthorized Disclosure of Information in Oracle E-Business Suite Mon, 02 Aug 2004 16:32:46 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert55.pdf 1091464366 Alert #55, Rev 1, 23 July 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in Net Services for Oracle Database Server Mon, 02 Aug 2004 16:32:14 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert54.pdf 1091464334 Alert #54, Rev 2, 30 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Report Review Agent Vulnerability in Oracle E-Business Suite Mon, 02 Aug 2004 16:31:41 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert53.pdf 1091464301 Alert #53, Rev 1, 10 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Two Security Vulnerabilities in Oracle9i Application Server Mon, 02 Aug 2004 16:31:06 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert52.pdf 1091464266 Alert #52, Rev 3, Updated 03 March 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in ORACLE Executable of Oracle9i Database Server Mon, 02 Aug 2004 16:30:22 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert51.pdf 1091464222 Alert #51, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in Oracle9i Database Server Mon, 02 Aug 2004 16:29:37 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert50.pdf 1091464177 Alert #50, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in Oracle9i Database Server Mon, 02 Aug 2004 16:29:03 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert49.pdf 1091464143 Alert #49, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow in Oracle9i Database Server Mon, 02 Aug 2004 16:28:26 GMT http://www.oracle.com/technology/deploy/security/pdf/2003alert48.pdf 1091464106 Alert #48, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Security Release of Apache 1.3.27 Mon, 02 Aug 2004 16:25:20 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert45.pdf 1091463920 Alert #45, Rev 6, 20 May 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Unauthorized Access Vulnerability in Oracle E-Business Suite, Release 11i Mon, 02 Aug 2004 16:24:12 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf 1091463852 Alert #44, Rev 1, 04 October 2002. Download the <b>mandatory</b> patch from <a href="http://metalink.oracle.com/">MetaLink</a>. Oracle9iAS Web Cache Administration Tool Vulnerability Mon, 02 Aug 2004 16:23:35 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert43rev1.pdf 1091463815 Alert #43, Rev 1, 04 October 2002. Follow the workarounds as specified in the Alert. Denial of Services Against Oracle Net Services Mon, 02 Aug 2004 16:22:12 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert42rev1.pdf 1091463732 Alert #42, Rev 3, 16 December 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Oracle9iAS OJSP Demo Vulnerability Mon, 02 Aug 2004 16:21:43 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert41rev1.pdf 1091463703 Alert #41, Rev 1, 14 August 2002. Follow the workarounds as specified in the Alert. Oracle Net Listener Vulnerabilities Mon, 02 Aug 2004 16:20:37 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert40rev3.pdf 1091463637 Alert #40, Rev 3, 08 August 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Web Cache (Oracle9iAS) Password Vulnerability Mon, 02 Aug 2004 16:20:00 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert39rev1.pdf 1091463600 Alert #39, Rev 1, 08 August 2002. Follow the workaround as specified in the Alert. Oracle Net Denial of Service Security Vulnerability Mon, 02 Aug 2004 16:19:21 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert38rev3.pdf 1091463561 Alert #38, Rev 3, 08 August 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. OpenSSL Buffer Overflow Mon, 02 Aug 2004 16:18:55 GMT http://www.oracle.com/technology/deploy/security/pdf/opensslAlert.pdf 1091463535 Alert #37, Updated 09 Aug 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Security Vulnerability in Apache HTTP Server of Oracle9iAS Mon, 02 Aug 2004 16:18:27 GMT http://www.oracle.com/technology/deploy/security/pdf/apache_alert.html 1091463507 Alert #36, Updated 12 July 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow Vulnerability in Oracle9iAS Reports Server Mon, 02 Aug 2004 16:18:04 GMT http://www.oracle.com/technology/deploy/security/pdf/reports6i_alert.pdf 1091463484 Alert #35, 05 June 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Buffer Overflow Vulnerability in Oracle Net (Oracle9i Database Server) Mon, 02 Aug 2004 16:17:29 GMT http://www.oracle.com/technology/deploy/security/pdf/net9_dos_alert.pdf 1091463449 Alert #34, 05 June 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. User Privileges Vulnerability in Oracle9i Database Server Mon, 02 Aug 2004 16:17:04 GMT http://www.oracle.com/technology/deploy/security/pdf/sql_joins_alert.pdf 1091463424 Alert #33, 17 April 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Unauthorized Access Vulnerability in the Oracle E-business Suite Mon, 02 Aug 2004 16:16:35 GMT http://www.oracle.com/technology/deploy/security/pdf/apps_alert_ebiz2.pdf 1091463395 Alert #32, 17 April 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>. Oracle Configurator Vulnerability Mon, 02 Aug 2004 16:16:11 GMT http://www.oracle.com/technology/deploy/security/htdocs/oconfigvul.html 1091463371 Alert #31, 01 April 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> and/or follow workarounds as specified in the Alert. SNMP Vulnerability in Oracle Enterprise Manager, Master_Peer Agent, for Oracle9i Database Mon, 02 Aug 2004 16:15:10 GMT http://www.oracle.com/technology/deploy/security/pdf/snmp_2002_alert.pdf 1091463310 Alert #30, 05 March 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a>. Vulnerability in PL/SQL EXTPROC in Oracle9i Database Mon, 02 Aug 2004 16:14:08 GMT http://www.oracle.com/technology/deploy/security/pdf/plsextproc_alert.pdf 1091463248 Alert #29, 07 August 2003. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> or follow the workaround as described in the Alert. Vulnerabilities in Oracle mod_plsql and JSP in Oracle9i Application Server, v1.0.2.x Mon, 02 Aug 2004 16:13:35 GMT http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf 1091463215 Alert #28, 06 February 2002, UPDATED 05 JULY 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> and follow the workarounds as described in the Alert. Vulnerabilities in Oracle9iAS Webcache Mon, 02 Aug 2004 16:13:08 GMT http://www.oracle.com/technology/deploy/security/pdf/webcache2.pdf 1091463188 Alert #27, 28 December 2001 DoS Against Oracle9iAS Mon, 02 Aug 2004 16:12:45 GMT http://www.oracle.com/technology/deploy/security/pdf/9iAS-GPF.pdf 1091463165 Alert #26 Vulnerabilities in mod_plsql Mon, 02 Aug 2004 16:12:19 GMT http://www.oracle.com/technology/deploy/security/pdf/modplsql.pdf 1091463139 Alert #25 Oracle Database Server DBSNMP Vulnerabilities Mon, 02 Aug 2004 16:11:48 GMT http://www.oracle.com/technology/deploy/security/pdf/dbsnmp_alert.pdf 1091463108 Alert #23, 29 November 2001 Security Implications of the Oracle9iAS Default SOAP Configuration Mon, 02 Aug 2004 16:11:18 GMT http://www.oracle.com/technology/deploy/security/pdf/ias_soap_alert.pdf 1091463078 Alert #22, Updated 23 September 2002 Oracle Label Security Mandatory Security Patch Mon, 02 Aug 2004 16:10:53 GMT http://www.oracle.com/technology/deploy/security/pdf/OLS817alert.pdf 1091463053 Alert #21, 18 October 2001 Oracle File Overwrite Security Vulnerability Mon, 02 Aug 2004 16:10:29 GMT http://www.oracle.com/technology/deploy/security/pdf/oracle_race.pdf 1091463029 Alert #20, 18 October 2001 Oracle Trace Collection Security Vulnerability Mon, 02 Aug 2004 16:09:50 GMT http://www.oracle.com/technology/deploy/security/pdf/otrcrep.pdf 1091462990 Alert #19, Updated 29 November 2001 Oracle9iAS Web Cache Overflow Vulnerability Mon, 02 Aug 2004 16:09:23 GMT http://www.oracle.com/technology/deploy/security/pdf/webcache.pdf 1091462963 Alert #18, 18 October 2001 Oracle Internet Directory Buffer Overflow Mon, 02 Aug 2004 16:09:03 GMT http://www.oracle.com/technology/deploy/security/pdf/oid_cert_bof.pdf 1091462943 Oracle SQL*Net/Net8 Malformed Packet Denial of Service Mon, 02 Aug 2004 16:08:48 GMT http://www.oracle.com/technology/deploy/security/pdf/nai_net8_dos.pdf 1091462928 Oracle SQL*Net/Net8 Denial of Service Mon, 02 Aug 2004 16:08:30 GMT http://www.oracle.com/technology/deploy/security/pdf/net8_dos_alert.pdf 1091462910 Oracle SQL*Net/Net8 Redirect Denial of Service Mon, 02 Aug 2004 16:08:06 GMT http://www.oracle.com/technology/deploy/security/pdf/net8_dos_redirect.pdf 1091462886 Launch of Forms from Oracle e-business Suite Mon, 02 Aug 2004 16:07:49 GMT http://www.oracle.com/technology/deploy/security/pdf/ebusiness_alert.pdf 1091462869 Execution of Oracle JSP Outside doc_root Mon, 02 Aug 2004 16:07:30 GMT http://www.oracle.com/technology/deploy/security/pdf/jspdocroot_alert.pdf 1091462850 Unintended Execution of Oracle JSP Tue, 13 Feb 2001 00:18:46 GMT http://www.oracle.com/technology/deploy/security/pdf/jspexecute_alert.pdf 982023526 Oracle JVM FilePermission Vulnerability Mon, 02 Aug 2004 16:06:27 GMT http://www.oracle.com/technology/deploy/security/pdf/ojvm_alert.pdf 1091462787 Oracle Internet Directory Buffer Overflows Mon, 02 Aug 2004 16:06:09 GMT http://www.oracle.com/technology/deploy/security/pdf/oid_alert.pdf 1091462769 Oracle Connection Manager Control SUID Mon, 02 Aug 2004 16:05:49 GMT http://www.oracle.com/technology/deploy/security/pdf/cmctl_alert.pdf 1091462749 Oracle XSQL Servlet Vulnerability Mon, 02 Aug 2004 16:05:31 GMT http://www.oracle.com/technology/deploy/security/pdf/xsql_alert.pdf 1091462731 Oracle Internet Application Server Mon, 02 Aug 2004 16:05:14 GMT http://www.oracle.com/technology/deploy/security/pdf/webdb_bugpost.pdf 1091462714 Oracle Enterprise Manager Backup and Recovery Mon, 02 Aug 2004 16:04:20 GMT http://www.oracle.com/technology/deploy/security/pdf/oem_alert.pdf 1091462660 Net8 Listener Vulnerability Mon, 02 Aug 2004 16:03:59 GMT http://www.oracle.com/technology/deploy/security/pdf/listener_alert.pdf 1091462639 Oracle Application Server: Remote Command Execution Mon, 02 Aug 2004 16:02:44 GMT http://www.oracle.com/technology/deploy/security/pdf/alert_oas1_bug.html 1091462564 Security Vulnerabilities in Oracle9i Application Server Mon, 02 Aug 2004 16:27:54 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert47.pdf 1091464074 Alert #47, Rev 3, 23 July 2003. Follow the workarounds as specified in the Alert. Buffer Overflow in iSQL*Plus (Oracle9i Database Server) Mon, 02 Aug 2004 16:40:25 GMT http://www.oracle.com/technology/deploy/security/pdf/2002alert46rev1.pdf 1091464825 Alert #46, Rev 3, 11 November 2002. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>. Oracle Security Update Tue, 12 Apr 2005 21:03:58 GMT http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf 1113339838 Alert #68, Rev 3, 27 December 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.