CVE-2003-1116
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/2003
Last modified:
03/04/2025
Description
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:oracle:e-business_suite:10.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://marc.info/?l=bugtraq&m=105012832418415&w=2
- http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
- http://securitytracker.com/id?1006550=
- http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
- http://www.kb.cert.org/vuls/id/168873
- http://www.securityfocus.com/bid/7325
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11768
- http://marc.info/?l=bugtraq&m=105012832418415&w=2
- http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
- http://securitytracker.com/id?1006550=
- http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
- http://www.kb.cert.org/vuls/id/168873
- http://www.securityfocus.com/bid/7325
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11768