Oracle Critical Patch Update - January 2007

vendor:

Oracle products

by:

Not mentioned

CVSS

CRITICAL

Multiple vulnerabilities

Not mentioned

CWE

Product Name: Oracle products

Affected Version From: Not mentioned

Affected Version To: Not mentioned

Patch Exists: YES

Related CWE: Not mentioned

CPE: Not mentioned

Metasploit:

Other Scripts:

Platforms Tested: Not mentioned

2007

Oracle Critical Patch Update – January 2007

The vulnerabilities affect all security properties of Oracle products and pose local and remote threats. Some vulnerabilities require authorization, while others do not. The most severe vulnerabilities can lead to complete compromise of affected computers.

Mitigation:

Apply the Critical Patch Update advisory released by Oracle for January 2007. Upgrade to supported releases. Unsupported releases are likely to be affected as well.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/22083/info

Oracle has released a Critical Patch Update advisory for January 2007 to address these vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by these issues as well.

The issues identified by the vendor affect all security properties of the Oracle products and present local and remote threats. Various levels of authorization are needed to leverage some of the issues, but other issues do not require any authorization. The most severe of the vulnerabilities could possibly expose affected computers to complete compromise. 

http://www.example.com:1158/em/dynamicImage/emSDK/chart/EmChartBean?beanId=\..\..\..\..\..\..\..\..\..\..\..\..\test.txt