Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » 88 holes patched in Oracle security update

88 holes patched in Oracle security update

by Nikola Strahija on October 20th, 2005 Oracle has released a big bundle of critical security patches. It fixes 88 vulnerabilities in products including its database and application servers and in some PeopleSoft and JD Edwards applications.


The patches are part of Oracle's quarterly update program, and affect versions of its database software from 8i onwards. Customers covered by Oracle's Extended Maintenance Support or Extended Support plans can download the patches.

The company supplied fixes for 33 vulnerabilities in its database server software, many of them easy to exploit and with wide impact on the confidentiality, integrity or availability of information stored in databases.

Oracle also patched 14 flaws in its application server software, 13 flaws in its Collaboration Suite, 22 in its E-Business Suite and one in its Enterprise Manager software.

Six of the patches are for PeopleSoft or JD Edwards EnterpriseOne software. One of the security vulnerabilities, known as CAN-2005-0873, was already public, Oracle said. According to the Common Vulnerabilities and Exposures list, this allows remote attackers to inject arbitrary web scripts or HTML into Oracle Reports Server 10g (9.0.4.3.3) via multiple cross-site scripting attacks.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »