Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:ORACLE:WORKSPACE-MGR-INJ |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
DB |
Keywords |
Oracle Database Server Workspace Manager Command Injection |
Release Date |
2009/07/08 |
Update Number |
1460 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: Oracle Database Server Workspace Manager Command Injection
This signature detects attempts to exploit a known vulnerability against Oracle Database Server Workspace Manager. A successful attack can lead to arbitrary command injection.
Extended Description
Oracle has released the October 2008 critical patch update addressing 36 vulnerabilities affecting the following software: Oracle Database Oracle Application Server Oracle E-Business Suite Oracle PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise Oracle JD Edwards EnterpriseOne Tools Oracle WebLogic Server (formerly BEA WebLogic Server) Oracle Workshop for WebLogic (formerly BEA WebLogic Workshop)
Affected Products
- Bea_systems weblogic_server 10.0
- Bea_systems weblogic_server 10.0 MP1
- Bea_systems weblogic_server 10.3
- Bea_systems weblogic_server 6.1.0
- Bea_systems weblogic_server 6.1.0 SP 1
- Bea_systems weblogic_server 6.1.0 SP 2
- Bea_systems weblogic_server 6.1.0 SP 3
- Bea_systems weblogic_server 6.1.0 SP 4
- Bea_systems weblogic_server 6.1.0 SP 5
- Bea_systems weblogic_server 6.1.0 SP6
- Bea_systems weblogic_server 6.1.0 SP 7
- Bea_systems weblogic_server 7.0.0
- Bea_systems weblogic_server 7.0.0 .0.1
- Bea_systems weblogic_server 7.0.0 .0.1 SP 1
- Bea_systems weblogic_server 7.0.0 .0.1 SP 2
- Bea_systems weblogic_server 7.0.0 .0.1 SP 3
- Bea_systems weblogic_server 7.0.0 .0.1 SP 4
- Bea_systems weblogic_server 7.0.0 SP 1
- Bea_systems weblogic_server 7.0.0 SP 2
- Bea_systems weblogic_server 7.0.0 SP 3
- Bea_systems weblogic_server 7.0.0 SP 4
- Bea_systems weblogic_server 7.0.0 SP 5
- Bea_systems weblogic_server 7.0.0 SP 6
- Bea_systems weblogic_server 7.0.0 SP 7
- Bea_systems weblogic_server 7.0 SP7
- Bea_systems weblogic_server 8.1
- Bea_systems weblogic_server 8.1.0
- Bea_systems weblogic_server 8.1.0 SP 1
- Bea_systems weblogic_server 8.1.0 SP 2
- Bea_systems weblogic_server 8.1.0 SP 3
- Bea_systems weblogic_server 8.1.0 SP 4
- Bea_systems weblogic_server 8.1.0 SP 5
- Bea_systems weblogic_server 8.1.0 SP 6
- Bea_systems weblogic_server 9.0
- Bea_systems weblogic_server 9.1
- Bea_systems weblogic_server 9.2
- Bea_systems weblogic_server 9.2 Maintenance Pack 3
- Bea_systems weblogic_workshop 10.0
- Bea_systems weblogic_workshop 10.0 MP1
- Bea_systems weblogic_workshop 10.2 GA
- Bea_systems weblogic_workshop 10.3 GA
- Bea_systems weblogic_workshop 8.1.0 SP 2
- Bea_systems weblogic_workshop 8.1.0 SP 3
- Bea_systems weblogic_workshop 8.1.0 SP 4
- Bea_systems weblogic_workshop 8.1.0 SP 5
- Bea_systems weblogic_workshop 8.1.0 SP 6
- Bea_systems weblogic_workshop 9.0
- Bea_systems weblogic_workshop 9.1
- Bea_systems weblogic_workshop 9.2
- Bea_systems weblogic_workshop 9.2
- Oracle e-business_suite_11i 11.5.10.2
- Oracle e-business_suite_12 12.0.4
- Oracle jd_edwards_enterpriseone 8.97
- Oracle jd_edwards_enterpriseone 8.98
- Oracle oracle10g_application_server 10.1.2.3.0
- Oracle oracle10g_application_server 10.1.3 .3.0
- Oracle oracle10g_application_server 10.1.3 .4.0
- Oracle oracle10g_application_server 9.0.4 3
- Oracle oracle10g_enterprise_edition 10.1.0 .5
- Oracle oracle10g_enterprise_edition 10.2.0 .2
- Oracle oracle10g_enterprise_edition 10.2.0 .3
- Oracle oracle10g_enterprise_edition 10.2.0.4
- Oracle oracle10g_personal_edition 10.1.0.5
- Oracle oracle10g_personal_edition 10.2.0 .2
- Oracle oracle10g_personal_edition 10.2.0 .3
- Oracle oracle10g_personal_edition 10.2.0.4
- Oracle oracle10g_standard_edition 10.2.0 .2
- Oracle oracle10g_standard_edition 10.2.0 .3
- Oracle oracle10g_standard_edition 10.2.0.4
- Oracle oracle11g_enterprise_edition 11.1.0 6
- Oracle oracle11g_standard_edition 11.1.0 6
- Oracle oracle11g_standard_edition_one 11.1.0 6
- Oracle oracle9i_enterprise_edition 9.2.0.8.0
- Oracle oracle9i_enterprise_edition 9.2.0 .8DV
- Oracle peoplesoft_enterprise_customer_relationship_manage 8.9
- Oracle peoplesoft_enterprise_customer_relationship_manage 9.0
- Oracle peoplesoft_enterprise_peopletools 8.48.18
- Oracle peoplesoft_enterprise_peopletools 8.49.14
References
- BugTraq: 31683
- CVE: CVE-2008-3982
- CVE: CVE-2008-3983
- CVE: CVE-2008-3984
- URL: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2008.html