Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

DB:ORACLE:DBMS:AQELM-OF

Severity

Critical

Recommended

No

Recommended Action

Drop

Category

DB

Keywords

Oracle DBMS_AQELM Overflow

Release Date

2008/07/17

Update Number

1213

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

DB: Oracle DBMS_AQELM Overflow


This signature detects attempts to exploit a known vulnerability in the Oracle Database Server DBMS_AQELM Package. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server, typically root.

Extended Description

Oracle has released the July 2008 Critical Patch Update that addresses 44 new vulnerabilities affecting the following products: Oracle Database Oracle TimesTen In-Memory Database Oracle Application Server Oracle E-Business Suite and Application Oracle Enterprise Manager Oracle PeopleSoft Enterprise Oracle BEA Products

Affected Products

  • Bea_systems weblogic_server 10.0
  • Bea_systems weblogic_server 10.0 MP1
  • Bea_systems weblogic_server 6.1.0
  • Bea_systems weblogic_server 6.1.0 SP 1
  • Bea_systems weblogic_server 6.1.0 SP 2
  • Bea_systems weblogic_server 6.1.0 SP 3
  • Bea_systems weblogic_server 6.1.0 SP 4
  • Bea_systems weblogic_server 6.1.0 SP 5
  • Bea_systems weblogic_server 6.1.0 SP 7
  • Bea_systems weblogic_server 7.0.0 SP 1
  • Bea_systems weblogic_server 7.0.0 SP 2
  • Bea_systems weblogic_server 7.0.0 SP 3
  • Bea_systems weblogic_server 7.0.0 SP 4
  • Bea_systems weblogic_server 7.0.0 SP 5
  • Bea_systems weblogic_server 7.0.0 SP 6
  • Bea_systems weblogic_server 7.0.0 SP 7
  • Bea_systems weblogic_server 8.1.0 SP 1
  • Bea_systems weblogic_server 8.1.0 SP 2
  • Bea_systems weblogic_server 8.1.0 SP 3
  • Bea_systems weblogic_server 8.1.0 SP 4
  • Bea_systems weblogic_server 8.1.0 SP 5
  • Bea_systems weblogic_server 8.1.0 SP 6
  • Bea_systems weblogic_server 9.0
  • Bea_systems weblogic_server 9.2
  • Bea_systems weblogic_server 9.2 Maintenance Pack 3
  • Hp oracle_for_openview 10g
  • Hp oracle_for_openview 10gR2
  • Hp oracle_for_openview 8.1.7
  • Hp oracle_for_openview 9.1.01
  • Hp oracle_for_openview 9.2
  • Hp oracle_for_openview_for_linux_ltu
  • Hp oracle_for_openview_for_linux_ltu_service_bureaus
  • Oracle e-business_suite_11i 11.5.10.2
  • Oracle e-business_suite_12 12.0.4
  • Oracle enterprise_manager_database_control_10g 10.1.0.5
  • Oracle enterprise_manager_database_control_10g 10.2.0.2
  • Oracle enterprise_manager_database_control_10g 10.2.0.3
  • Oracle enterprise_manager_database_control_10g 10.2.0.4
  • Oracle enterprise_manager_database_control_11i 11.1.0.6
  • Oracle enterprise_manager_grid_control_10g 10.1.0 .5
  • Oracle enterprise_manager_grid_control_10g 10.1.0 6
  • Oracle hyperion_bi_plus 9.2.0.3
  • Oracle hyperion_bi_plus 9.2.1.0
  • Oracle hyperion_bi_plus 9.3.1.0
  • Oracle hyperion_performance_suite 8.3.2.4
  • Oracle hyperion_performance_suite 8.5.0.3
  • Oracle oracle10g_application_server 10.1.2
  • Oracle oracle10g_application_server 10.1.2.3.0
  • Oracle oracle10g_application_server 10.1.3 .1.0
  • Oracle oracle10g_application_server 10.1.3 .3.0
  • Oracle oracle10g_application_server 9.0.4 3
  • Oracle oracle10g_enterprise_edition 10.1.0 .5
  • Oracle oracle10g_enterprise_edition 10.2.0 .2
  • Oracle oracle10g_enterprise_edition 10.2.0 .3
  • Oracle oracle10g_enterprise_edition 10.2.0.4
  • Oracle oracle10g_personal_edition 10.1.0.5
  • Oracle oracle10g_personal_edition 10.2.0 .2
  • Oracle oracle10g_personal_edition 10.2.0 .3
  • Oracle oracle10g_personal_edition 10.2.0.4
  • Oracle oracle10g_standard_edition 10.1.0 .5
  • Oracle oracle10g_standard_edition 10.2.0 .2
  • Oracle oracle10g_standard_edition 10.2.0 .3
  • Oracle oracle10g_standard_edition 10.2.0.4
  • Oracle oracle11g_enterprise_edition 11.1.0 6
  • Oracle oracle11g_standard_edition 11.1.0 6
  • Oracle oracle11g_standard_edition_one 11.1.0 6
  • Oracle oracle9i_application_server 1.0.2 .2
  • Oracle oracle9i_enterprise_edition 9.0.1 .5 FIPS
  • Oracle oracle9i_enterprise_edition 9.2.0.8.0
  • Oracle oracle9i_enterprise_edition 9.2.0 .8DV
  • Oracle oracle9i_personal_edition 9.0.1 .5 FIPS
  • Oracle oracle9i_personal_edition 9.2.0 .8
  • Oracle oracle9i_personal_edition 9.2.0 .8DV
  • Oracle oracle9i_standard_edition 9.0.1 .5 FIPS
  • Oracle oracle9i_standard_edition 9.2.0.8
  • Oracle oracle9i_standard_edition 9.2.0 .8DV
  • Oracle peoplesoft_enterprise_customer_relationship_manage 8.9
  • Oracle peoplesoft_enterprise_customer_relationship_manage 9.0
  • Oracle peoplesoft_enterprise_peopletools 8.48.18
  • Oracle peoplesoft_enterprise_peopletools 8.49.12
  • Oracle timesten_in-memory_database 7.0.3.0.0

References

  • BugTraq: 30177
  • CVE: CVE-2008-2607
  • URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out