Signature Detail

DB: Oracle SYS.KUPW-WORKER Malformed Command

This signature detects attempts to exploit a known vulnerability against Oracle Server. A successful attack can lead to arbitrary code execution.

Extended Description

Various Oracle applications including Oracle Database, Oracle Application Server, Oracle Collaboration Suite, Oracle E-Business Suite and Applications, Oracle Pharmaceutical Applications, Oracle Enterprise Manager, Oracle PeopleSoft Enterprise, and JD Edwards EnterpriseOne are affected by multiple vulnerabilities. Oracle has released a Critical Patch Update advisory for July 2006 to address these vulnerabilities. This Critical Patch Update addresses the vulnerabilities for supported releases. Earlier unsupported releases are likely to be affected by the issues as well. These issues will be split into individual records when more information has been disclosed.

Affected Products

• Hp hp-ux B.11.11
• Hp hp-ux B.11.23
• Oracle application_server_10g 9.0.4
• Oracle application_server_10g 9.0.4 .1
• Oracle application_server_10g 9.0.4 .2
• Oracle application_server_10g 9.0.4 .3
• Oracle application_server_portal 10.1.4 .0.0
• Oracle collaboration_suite_release_1 10.1.2
• Oracle collaboration_suite_release_2 9.0.4 .2
• Oracle developer_suite 9.0.4 .2
• Oracle e-business_suite 11.0.0
• Oracle e-business_suite_11i 11.5.10
• Oracle e-business_suite_11i 11.5.10 CU2
• Oracle e-business_suite_11i 11.5.7
• Oracle e-business_suite_11i 11.5.8
• Oracle e-business_suite_11i 11.5.9
• Oracle enterprise_manager_grid_control_10g 10.2.0 .1
• Oracle jd_edwards_enterpriseone 8.95
• Oracle jd_edwards_enterpriseone 8.95.0 B1
• Oracle jd_edwards_enterpriseone 8.95.0 F1
• Oracle jd_edwards_enterpriseone 8.95.J1
• Oracle jd_edwards_enterpriseone 8.96
• Oracle oracle10g_application_server 10.1.2
• Oracle oracle10g_application_server 10.1.3 .0.0
• Oracle oracle10g_application_server 9.0.4 .0
• Oracle oracle10g_application_server 9.0.4 .1
• Oracle oracle10g_application_server 9.0.4 .2
• Oracle oracle10g_enterprise_edition 10.1.0 .0.3
• Oracle oracle10g_enterprise_edition 10.1.0 .0.4
• Oracle oracle10g_enterprise_edition 10.2.0 .1
• Oracle oracle10g_enterprise_edition 10.2.0 .2
• Oracle oracle10g_enterprise_edition 9.0.4 .0
• Oracle oracle10g_personal_edition 10.1.0 .0.3
• Oracle oracle10g_personal_edition 10.1.0 .0.4
• Oracle oracle10g_personal_edition 10.2.0 .1
• Oracle oracle10g_personal_edition 10.2.0 .2
• Oracle oracle10g_personal_edition 9.0.4 .0
• Oracle oracle10g_standard_edition 10.1.0 .0.3
• Oracle oracle10g_standard_edition 10.1.0 .0.4
• Oracle oracle10g_standard_edition 10.1.0 .0.5
• Oracle oracle10g_standard_edition 10.1.0 .4.2
• Oracle oracle10g_standard_edition 10.2.0.1
• Oracle oracle10g_standard_edition 10.2.0 .2
• Oracle oracle10g_standard_edition 9.0.4 .0
• Oracle oracle8 8.0.6
• Oracle oracle8 8.0.6 .3
• Oracle oracle9i_application_server 1.0.2 .2
• Oracle oracle9i_application_server 9.0.2 .3
• Oracle oracle9i_application_server 9.0.3 .1
• Oracle oracle9i_application_server 9.2.0 .0.6
• Oracle oracle9i_application_server 9.2.0 .0.7
• Oracle oracle9i_enterprise_edition 8.1.7
• Oracle oracle9i_enterprise_edition 9.0.1 .4
• Oracle oracle9i_enterprise_edition 9.0.1 .5
• Oracle oracle9i_enterprise_edition 9.0.1 .5 FIPS
• Oracle oracle9i_enterprise_edition 9.2.0 .0.5
• Oracle oracle9i_enterprise_edition 9.2.0.6.0
• Oracle oracle9i_enterprise_edition 9.2.0.7.0
• Oracle oracle9i_personal_edition 8.1.7
• Oracle oracle9i_personal_edition 9.0.1 .4
• Oracle oracle9i_personal_edition 9.0.1 .5
• Oracle oracle9i_personal_edition 9.0.1 .5 FIPS
• Oracle oracle9i_personal_edition 9.2.0 .0.5
• Oracle oracle9i_personal_edition 9.2.0 .6
• Oracle oracle9i_personal_edition 9.2.0 .7
• Oracle oracle9i_standard_edition 8.1.7
• Oracle oracle9i_standard_edition 9.0.1 .4
• Oracle oracle9i_standard_edition 9.0.1 .5
• Oracle oracle9i_standard_edition 9.0.1 .5 FIPS
• Oracle oracle9i_standard_edition 9.2.0 .0.5
• Oracle oracle9i_standard_edition 9.2.0 .6
• Oracle oracle9i_standard_edition 9.2.0 .7
• Oracle pharmaceutical_applications 4.5.0
• Oracle pharmaceutical_applications 4.5.1
• Oracle pharmaceutical_applications 4.5.2
• Oracle workflow 11.5.1
• Oracle workflow 11.5.9 .5
• Peoplesoft enterprise_portal 8.4.0
• Peoplesoft enterprise_portal 8.8.0

References

• BugTraq: 19054
• CVE: CVE-2006-3698
• URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2006.html