Joxean Koret

The issue allows remote attackers to execute arbitrary database commands. This can be achieved by performing a remote registration of a database instance or service name that already exists, and then conducting a man-in-the-middle attack to hijack database connections.

The issue affects confidentiality, integrity, and availability. It is reportedly related to the handling of HTTP POST requests, potentially allowing remote attackers to execute arbitrary code via format string specifiers in the URI, which are not properly handled when logging to opmn/logs/opmn.log.

The issue affects confidentiality, integrity, and availability. It is reportedly related to the `msg` parameter in the `evtdump` CGI module, potentially a format string vulnerability.

The issue concerns an unspecified vulnerability in the Oracle Internet Directory component. It is claimed by researchers to potentially cause a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference, although Oracle has not commented on this. The attack vector is remote.

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

The APPLSYS.FND DM NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.

The ADI BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND DOCUMENTS table via the ADI DISPLAY REPORT function, when passed a certain parameter. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.

Name of the Vulnerable Software and Affected Versions: HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47 HP LaserJet 5100 Series printers with firmware V.29.12 Description: The issue allows remote attackers to cause a denial of service, resulting in a device crash, by sending a long string in the LIST or NLST command. Recommendations: For HP LaserJet 5000 Series printers with firmware R.25.15, update the firmware to a version that is not affected by this issue. For HP LaserJet 5000 Series printers with firmware R.25.47, update the firmware to a version that is not affected by this issue. For HP LaserJet 5100 Series printers with firmware V.29.12, update the firmware to a version that is not affected by this issue.

Name of the Vulnerable Software and Affected Versions: Texas Imperial Software WFTPD Pro Server version 3.23.1.1 Description: The issue allows remote authenticated users to execute arbitrary code or cause a denial of service via crafted APPE commands that contain `/` or `` characters. Recommendations: For Texas Imperial Software WFTPD Pro Server version 3.23.1.1, consider restricting access to the APPE command until a patch is available. As a temporary workaround, avoid using the APPE command with `/` or `` characters to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: War FTP Daemon (WarFTPd) version 1.82.00-RC11 Description: The issue allows remote authenticated users to cause a denial of service by sending a large number of "%s" format strings in various commands, including CWD, CDUP, DELE, NLST, LIST, SIZE, and possibly others. Recommendations: For War FTP Daemon (WarFTPd) version 1.82.00-RC11, consider restricting access to the affected commands as a temporary workaround until a patch is available. Avoid using the vulnerable commands in the FTP daemon until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the `StoreLicense` function, which triggers memory corruption and possibly a buffer overflow.

The issue is related to an unspecified vulnerability in the Net Listener component of the Oracle Database server. The impact and attack vectors of this issue are not specified.

The issue is related to an unspecified vulnerability in the Query Optimizer component of the Oracle Database server. The impact and attack vectors of this issue are not specified.

The issue is related to an unspecified vulnerability in the Query Optimizer component of the Oracle Database server. The impact and attack vectors of this issue are not specified.

The issue is related to an unspecified vulnerability in the Streams Capture component, potentially allowing SQL injection in the SET DIRECTORY ROOT function within the DBMS CDC PUBLISH package. Details about the vulnerability are limited due to unavailability from Oracle.

The issue concerns multiple unspecified vulnerabilities in the Oracle iLearning component, which have unspecified impact and attack vectors.

The issue is related to an unspecified vulnerability in the Upgrade & Downgrade component, potentially allowing SQL injection in the DBMS REGISTRY package. This affects certain parameters to the following functions: (1) IS COMPONENT, (2) GET COMP OPTION, (3) DISABLE DDL TRIGGERS, (4) SCRIPT EXISTS, (5) COMP PATH, (6) GATHER STATS, (7) NOTHING SCRIPT, and (8) VALIDATE COMPONENTS. The estimated number of potentially affected devices and details about real-world incidents are not available.

The issue affects the Reorganize Objects & Convert Tablespace component and has an unspecified impact and attack vectors.

The issue affects the Oracle Database server and involves multiple unspecified vulnerabilities in various components, including the Data Pump, Net Listener, and Oracle Text components. Specifically, it is claimed by a reliable independent researcher that one of the vulnerabilities, DB06, is a SQL injection issue in certain functions within the DBMS DATAPUMP module, including `GENERATE JOB NAME`, `GET WORKERSTATUSLIST1010`, `GET PARAMVALUES1010`, `GET DUMPFILESET1010`, `GET JOBSTATUS1010`, `ATTACH`, and `ESTABLISH REMOTE CONTEXT`. The exact impact and attack vectors are not specified due to unavailable details from Oracle.

The issue involves multiple unspecified vulnerabilities in various components of the Oracle Database server, including the Data Pump, Oracle Text, Streams Apply, Streams Capture, and Streams Subcomponent. One of the vulnerabilities, DB05, is claimed by a reliable independent researcher to involve SQL injection in several functions within the DBMS METADATA UTIL, DBMS METADATA INT, and DBMS METADATA packages. These functions include `LONG2VARCHAR`, `LONG2VCMAX`, `LONG2VCNT`, `LONG2CLOB`, `MAKE FILTER`, `FETCH VIEWS ERROR`, `FETCH FILTERS`, `FETCH VIEWS`, `SET FILTER COMMON`, `DO FILTER SCRIPT`, `SET TABLE FILTERS`, `MAKE FILTER TEXT`, and `GET PREPOST TABLE ACT`.