Oracle Security Alertshttp://www.oracle.com/technology/deploy/security/alerts.htmSecurity Alerts Issued by Oracle en-usCopyright 2008 Oracle. All Rights Reserved.otnfeedback_us@oracle.comTue, 12 Jul 2005 19:47:53 GMTTue, 15 Apr 2008 22:13:44 GMTCritical Patch Update - April 2008http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2008.html{79b1b46c-1767-8777-2959-a2e8eb305efc}Tue, 15 Apr 2008 22:13:44 GMTCritical Patch Update - January 2008http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2008.html{fe1e34e3-ec35-f2bb-2165-5bc0cb7e6878}Tue, 15 Jan 2008 22:55:07 GMTCritical Patch Update - October 2007http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2007.html{ff8225ab-d93a-dd41-5494-83f32b07f8bf}Tue, 16 Oct 2007 20:47:15 GMTCritical Patch Update - July 2007http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2007.html{3205a52b-529d-9be9-df09-81f18b2a51b6}Tue, 17 Jul 2007 20:21:34 GMTCritical Patch Update - April 2007http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html{40f4285c-73c-2fb9-b06e-a7804092775}Wed, 18 Apr 2007 15:57:25 GMTCritical Patch Update - January 2007http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html{c0c928e1-d027-cf8e-7b5e-b4a04d7faa32}Tue, 16 Jan 2007 23:35:52 GMTCritical Patch Update - October 2006http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html{3e5ecb8d-67cd-cf5e-198b-a455e6e26b1b}Tue, 17 Oct 2006 18:37:45 GMTCritical Patch Update - April 2006http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html{37ec4308-50b-3dfc-be4e-94816dc3c039}Tue, 18 Apr 2006 20:42:18 GMTCritical Patch Update - January 2006http://www.oracle.com/technology/deploy/security/alerts.htm{a6ae5c0b-7f8c-7e38-48-ee5897a54118}Wed, 18 Jan 2006 00:20:10 GMTCritical Patch Update - October 2005http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html{5b1d98a-45db-4727-d5cd-e7addcc4f25}Tue, 18 Oct 2005 22:25:52 GMTCritical Patch Update - July 2005http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.htmlTue, 12 Jul 2005 19:46:55 GMTCritical Patch Update - April 2005http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdfTue, 18 Oct 2005 22:28:17 GMTCritical Patch Update - January 2005http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdfTue, 18 Oct 2005 22:28:22 GMTUnauthorized Access Vulnerabilities in Oracle E-Business Suitehttp://www.oracle.com/technology/deploy/security/pdf/2004alert67.pdf Alert #67, Rev 1, 3 June 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:40:00 GMTSecurity Vulnerabilities in Oracle Application Server Web Cachehttp://www.oracle.com/technology/deploy/security/pdf/2004alert66.pdf Alert #66, Rev 2, 2 April 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:39:29 GMTSecurity Vulnerability in Oracle9i Application and Database Servershttp://www.oracle.com/technology/deploy/security/pdf/2004alert65.pdf Alert #65, Rev 4, 2 June 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:38:48 GMTSecurity Vulnerabilities in Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2004alert64.pdfAlert #64, Rev 2, 20 May 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:38:10 GMTSecurity Vulnerabilities in Oracle9i Litehttp://www.oracle.com/technology/deploy/security/pdf/2004alert63.pdfAlert #63, Rev 1, 18 February 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:37:32 GMTSSL Update for CERT CA-2003-26 and Older SSL Issueshttp://www.oracle.com/technology/deploy/security/pdf/2003alert62.pdf Alert #62, Rev 1, 04 December 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:36:50 GMTSQL Injection Vulnerability in Oracle9i Application Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert61.pdfAlert #61, Rev 3, 13 November 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:36:07 GMTUnauthorized Access to Restricted Content in Oracle Fileshttp://www.oracle.com/technology/deploy/security/pdf/2003alert60.pdfAlert #60, Rev 1, 28 October 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:35:37 GMTBuffer Overflow in Oracle Database Server Binarieshttp://www.oracle.com/technology/deploy/security/pdf/2003alert59.pdfAlert #59, Rev 3, 13 November 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:35:08 GMTBuffer Overflow in the XML Database of Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003Alert58.pdfAlert #58, Rev 1, 18 August 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:34:31 GMTBuffer Overflows in EXTPROC of Oracle Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert57.pdfAlert #57, Rev 2, 07August 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:33:56 GMTBuffer Overflow Vulnerability in Oracle E-Business Suitehttp://www.oracle.com/technology/deploy/security/pdf/2003alert56.pdfAlert #56, Rev 1, 23 July 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:33:20 GMTUnauthorized Disclosure of Information in Oracle E-Business Suitehttp://www.oracle.com/technology/deploy/security/pdf/2003alert55.pdfAlert #55, Rev 1, 23 July 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:32:46 GMTBuffer Overflow in Net Services for Oracle Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert54.pdfAlert #54, Rev 2, 30 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:32:14 GMTReport Review Agent Vulnerability in Oracle E-Business Suitehttp://www.oracle.com/technology/deploy/security/pdf/2003alert53.pdfAlert #53, Rev 1, 10 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:31:41 GMTTwo Security Vulnerabilities in Oracle9i Application Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert52.pdfAlert #52, Rev 3, Updated 03 March 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:31:06 GMTBuffer Overflow in ORACLE Executable of Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert51.pdfAlert #51, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:30:22 GMTBuffer Overflow in Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert50.pdfAlert #50, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:29:37 GMTBuffer Overflow in Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert49.pdfAlert #49, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:29:03 GMTBuffer Overflow in Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/2003alert48.pdfAlert #48, Rev 6, Updated 18 April 2003. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:28:26 GMTSecurity Release of Apache 1.3.27http://www.oracle.com/technology/deploy/security/pdf/2002alert45.pdfAlert #45, Rev 6, 20 May 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:25:20 GMTUnauthorized Access Vulnerability in Oracle E-Business Suite, Release 11ihttp://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdfAlert #44, Rev 1, 04 October 2002. Download the <b>mandatory</b> patch from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:24:12 GMTOracle9iAS Web Cache Administration Tool Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/2002alert43rev1.pdfAlert #43, Rev 1, 04 October 2002. Follow the workarounds as specified in the Alert.Mon, 02 Aug 2004 16:23:35 GMTDenial of Services Against Oracle Net Serviceshttp://www.oracle.com/technology/deploy/security/pdf/2002alert42rev1.pdfAlert #42, Rev 3, 16 December 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:22:12 GMTOracle9iAS OJSP Demo Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/2002alert41rev1.pdfAlert #41, Rev 1, 14 August 2002. Follow the workarounds as specified in the Alert.Mon, 02 Aug 2004 16:21:43 GMTOracle Net Listener Vulnerabilitieshttp://www.oracle.com/technology/deploy/security/pdf/2002alert40rev3.pdfAlert #40, Rev 3, 08 August 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:20:37 GMTWeb Cache (Oracle9iAS) Password Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/2002alert39rev1.pdfAlert #39, Rev 1, 08 August 2002. Follow the workaround as specified in the Alert.Mon, 02 Aug 2004 16:20:00 GMTOracle Net Denial of Service Security Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/2002alert38rev3.pdfAlert #38, Rev 3, 08 August 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:19:21 GMTOpenSSL Buffer Overflowhttp://www.oracle.com/technology/deploy/security/pdf/opensslAlert.pdfAlert #37, Updated 09 Aug 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:18:55 GMTSecurity Vulnerability in Apache HTTP Server of Oracle9iAShttp://www.oracle.com/technology/deploy/security/pdf/apache_alert.htmlAlert #36, Updated 12 July 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:18:27 GMTBuffer Overflow Vulnerability in Oracle9iAS Reports Serverhttp://www.oracle.com/technology/deploy/security/pdf/reports6i_alert.pdfAlert #35, 05 June 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:18:04 GMTBuffer Overflow Vulnerability in Oracle Net (Oracle9i Database Server)http://www.oracle.com/technology/deploy/security/pdf/net9_dos_alert.pdfAlert #34, 05 June 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:17:29 GMTUser Privileges Vulnerability in Oracle9i Database Serverhttp://www.oracle.com/technology/deploy/security/pdf/sql_joins_alert.pdfAlert #33, 17 April 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:17:04 GMTUnauthorized Access Vulnerability in the Oracle E-business Suitehttp://www.oracle.com/technology/deploy/security/pdf/apps_alert_ebiz2.pdfAlert #32, 17 April 2002. Download the patches from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:16:35 GMTOracle Configurator Vulnerabilityhttp://www.oracle.com/technology/deploy/security/htdocs/oconfigvul.htmlAlert #31, 01 April 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> and/or follow workarounds as specified in the Alert.Mon, 02 Aug 2004 16:16:11 GMTSNMP Vulnerability in Oracle Enterprise Manager, Master_Peer Agent, for Oracle9i Databasehttp://www.oracle.com/technology/deploy/security/pdf/snmp_2002_alert.pdfAlert #30, 05 March 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:15:10 GMTVulnerability in PL/SQL EXTPROC in Oracle9i Databasehttp://www.oracle.com/technology/deploy/security/pdf/plsextproc_alert.pdfAlert #29, 07 August 2003. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> or follow the workaround as described in the Alert.Mon, 02 Aug 2004 16:14:08 GMTVulnerabilities in Oracle mod_plsql and JSP in Oracle9i Application Server, v1.0.2.xhttp://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdfAlert #28, 06 February 2002, UPDATED 05 JULY 2002. Download the patch from <a href="http://metalink.oracle.com/">MetaLink</a> and follow the workarounds as described in the Alert.Mon, 02 Aug 2004 16:13:35 GMTVulnerabilities in Oracle9iAS Webcachehttp://www.oracle.com/technology/deploy/security/pdf/webcache2.pdfAlert #27, 28 December 2001Mon, 02 Aug 2004 16:13:08 GMTDoS Against Oracle9iAShttp://www.oracle.com/technology/deploy/security/pdf/9iAS-GPF.pdfAlert #26Mon, 02 Aug 2004 16:12:45 GMTVulnerabilities in mod_plsqlhttp://www.oracle.com/technology/deploy/security/pdf/modplsql.pdfAlert #25Mon, 02 Aug 2004 16:12:19 GMTOracle Database Server DBSNMP Vulnerabilitieshttp://www.oracle.com/technology/deploy/security/pdf/dbsnmp_alert.pdfAlert #23, 29 November 2001Mon, 02 Aug 2004 16:11:48 GMTSecurity Implications of the Oracle9iAS Default SOAP Configurationhttp://www.oracle.com/technology/deploy/security/pdf/ias_soap_alert.pdfAlert #22, Updated 23 September 2002Mon, 02 Aug 2004 16:11:18 GMTOracle Label Security Mandatory Security Patchhttp://www.oracle.com/technology/deploy/security/pdf/OLS817alert.pdfAlert #21, 18 October 2001Mon, 02 Aug 2004 16:10:53 GMTOracle File Overwrite Security Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/oracle_race.pdfAlert #20, 18 October 2001Mon, 02 Aug 2004 16:10:29 GMTOracle Trace Collection Security Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/otrcrep.pdfAlert #19, Updated 29 November 2001Mon, 02 Aug 2004 16:09:50 GMTOracle9iAS Web Cache Overflow Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/webcache.pdfAlert #18, 18 October 2001Mon, 02 Aug 2004 16:09:23 GMTOracle Internet Directory Buffer Overflowhttp://www.oracle.com/technology/deploy/security/pdf/oid_cert_bof.pdfMon, 02 Aug 2004 16:09:03 GMTOracle SQL*Net/Net8 Malformed Packet Denial of Servicehttp://www.oracle.com/technology/deploy/security/pdf/nai_net8_dos.pdfMon, 02 Aug 2004 16:08:48 GMTOracle SQL*Net/Net8 Denial of Servicehttp://www.oracle.com/technology/deploy/security/pdf/net8_dos_alert.pdfMon, 02 Aug 2004 16:08:30 GMTOracle SQL*Net/Net8 Redirect Denial of Servicehttp://www.oracle.com/technology/deploy/security/pdf/net8_dos_redirect.pdfMon, 02 Aug 2004 16:08:06 GMTLaunch of Forms from Oracle e-business Suitehttp://www.oracle.com/technology/deploy/security/pdf/ebusiness_alert.pdfMon, 02 Aug 2004 16:07:49 GMTExecution of Oracle JSP Outside doc_roothttp://www.oracle.com/technology/deploy/security/pdf/jspdocroot_alert.pdfMon, 02 Aug 2004 16:07:30 GMTUnintended Execution of Oracle JSPhttp://www.oracle.com/technology/deploy/security/pdf/jspexecute_alert.pdfTue, 13 Feb 2001 00:18:46 GMTOracle JVM FilePermission Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/ojvm_alert.pdfMon, 02 Aug 2004 16:06:27 GMTOracle Internet Directory Buffer Overflowshttp://www.oracle.com/technology/deploy/security/pdf/oid_alert.pdfMon, 02 Aug 2004 16:06:09 GMTOracle Connection Manager Control SUIDhttp://www.oracle.com/technology/deploy/security/pdf/cmctl_alert.pdfMon, 02 Aug 2004 16:05:49 GMTOracle XSQL Servlet Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/xsql_alert.pdfMon, 02 Aug 2004 16:05:31 GMTOracle Internet Application Serverhttp://www.oracle.com/technology/deploy/security/pdf/webdb_bugpost.pdfMon, 02 Aug 2004 16:05:14 GMTOracle Enterprise Manager Backup and Recoveryhttp://www.oracle.com/technology/deploy/security/pdf/oem_alert.pdfMon, 02 Aug 2004 16:04:20 GMTNet8 Listener Vulnerabilityhttp://www.oracle.com/technology/deploy/security/pdf/listener_alert.pdfMon, 02 Aug 2004 16:03:59 GMTOracle Application Server: Remote Command Executionhttp://www.oracle.com/technology/deploy/security/pdf/alert_oas1_bug.html Mon, 02 Aug 2004 16:02:44 GMTSecurity Vulnerabilities in Oracle9i Application Serverhttp://www.oracle.com/technology/deploy/security/pdf/2002alert47.pdfAlert #47, Rev 3, 23 July 2003. Follow the workarounds as specified in the Alert.Mon, 02 Aug 2004 16:27:54 GMTBuffer Overflow in iSQL*Plus (Oracle9i Database Server)http://www.oracle.com/technology/deploy/security/pdf/2002alert46rev1.pdfAlert #46, Rev 3, 11 November 2002. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Mon, 02 Aug 2004 16:40:25 GMTOracle Security Updatehttp://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfAlert #68, Rev 3, 27 December 2004. Patches are available on <a href="http://metalink.oracle.com/">MetaLink</a>.Tue, 12 Apr 2005 21:03:58 GMT