Lucene search

[email protected]CVE-2003-1116

HistoryMar 12, 2005 - 5:00 a.m.

CVE-2003-1116

2005-03-1205:00:00

[email protected]

web.nvd.nist.gov

cve-2003-1116

communications protocol

report review agent

rra

oracle e-business suite

authentication bypass

remote attackers

sensitive information

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Affected configurations

NVD

Node

oraclee-business_suiteMatch10.7

oraclee-business_suiteMatch11.0

oraclee-business_suiteMatch11.1

oraclee-business_suiteMatch11.2

oraclee-business_suiteMatch11.3

oraclee-business_suiteMatch11.4

oraclee-business_suiteMatch11.5

oraclee-business_suiteMatch11.6

oraclee-business_suiteMatch11.7

oraclee-business_suiteMatch11.8

CPENameOperatorVersion
oracle:e-business_suiteoracle e-business suiteeq10.7
oracle:e-business_suiteoracle e-business suiteeq11.0
oracle:e-business_suiteoracle e-business suiteeq11.1
oracle:e-business_suiteoracle e-business suiteeq11.2
oracle:e-business_suiteoracle e-business suiteeq11.3
oracle:e-business_suiteoracle e-business suiteeq11.4
oracle:e-business_suiteoracle e-business suiteeq11.5
oracle:e-business_suiteoracle e-business suiteeq11.6
oracle:e-business_suiteoracle e-business suiteeq11.7
oracle:e-business_suiteoracle e-business suiteeq11.8

CPE	Name	Operator	Version
oracle:e-business_suite	oracle e-business suite	eq	10.7
oracle:e-business_suite	oracle e-business suite	eq	11.0
oracle:e-business_suite	oracle e-business suite	eq	11.1
oracle:e-business_suite	oracle e-business suite	eq	11.2
oracle:e-business_suite	oracle e-business suite	eq	11.3
oracle:e-business_suite	oracle e-business suite	eq	11.4
oracle:e-business_suite	oracle e-business suite	eq	11.5
oracle:e-business_suite	oracle e-business suite	eq	11.6
oracle:e-business_suite	oracle e-business suite	eq	11.7
oracle:e-business_suite	oracle e-business suite	eq	11.8

References

marc.info/?l=bugtraq&m=105012832418415&w=2

otn.oracle.com/deploy/security/pdf/2003alert53.pdf

securitytracker.com/id?1006550

www.integrigy.com/alerts/FNDFS_Vulnerability.htm

www.kb.cert.org/vuls/id/168873

www.securityfocus.com/bid/7325

exchange.xforce.ibmcloud.com/vulnerabilities/11768

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Related for CVE-2003-1116

cvelist1 nvd1