Lucene search

[email protected]NVD:CVE-2003-1116

HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1116

2003-12-3105:00:00

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Affected configurations

NVD

Node

oraclee-business_suiteMatch10.7

oraclee-business_suiteMatch11.0

oraclee-business_suiteMatch11.1

oraclee-business_suiteMatch11.2

oraclee-business_suiteMatch11.3

oraclee-business_suiteMatch11.4

oraclee-business_suiteMatch11.5

oraclee-business_suiteMatch11.6

oraclee-business_suiteMatch11.7

oraclee-business_suiteMatch11.8

References

marc.info/?l=bugtraq&m=105012832418415&w=2

otn.oracle.com/deploy/security/pdf/2003alert53.pdf

securitytracker.com/id?1006550

www.integrigy.com/alerts/FNDFS_Vulnerability.htm

www.kb.cert.org/vuls/id/168873

www.securityfocus.com/bid/7325

exchange.xforce.ibmcloud.com/vulnerabilities/11768

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

Related for NVD:CVE-2003-1116

cvelist1 cve1