CVE-2010-3599

The CVE-2010-3599 issue affects Oracle Document Capture (NCSECWLib ActiveX), where the WriteJPG method in NCSECWLib can be exploited via a crafted page to overwrite files or trigger a buffer overflow, potentially enabling arbitrary code execution. The vulnerability is reported in Oracle Document ...

CVE-2010-3595

CVE-2010-3595 affects Oracle Document Capture’s EasyMail ActiveX control (emsmtp.dll). The connected advisories and exploit references describe an information-disclosure vulnerability caused by improper validation in the ImportBodyText/related methods, enabling a remote attacker to read arbitrary...

CVE-2010-3592

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Internal Operations...

CVE-2010-3599

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU...

CVE-2010-4419

Technical details such as affected components, vulnerable vectors, root cause, or fixes are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2010-3592

Technical details for CVE-2010-3592 are not publicly available in the provided documents; the entries describe an unspecified vulnerability in Oracle Document Capture. Monitor for updates.

CVE-2010-3591

CVE-2010-3591 affects Oracle Document Capture (ActiveX: Actbar2.ocx and EMPOP3Lib empop3.dll) within Oracle Fusion Middleware 10.1.3.4/10.1.3.5. DSecRG advisories describe insecure methods in Actbar2.ocx and empop3.dll that can overwrite or delete arbitrary files, with exploits publicly discussed...

CVE-2010-3598

Affected product: Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5. The issue is described as an unspecified vulnerability relating to the Import Export Utility that allows remote attackers to affect integrity. The Connected documents corroborate multiple CVEs (...

CVE-2010-3591: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from...

CVE-2010-3598: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility...

CVE-2010-4419: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle 31 and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture...

CVE-2010-3595: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has no...

PT-2011-1419

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Import Export Utility in the Oracle Document...

PT-2011-1523

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CRM versions 9.0 Bundle 31 and 9.1 Bundle 6 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Order Capture. Recommendations For...

PT-2011-1420

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects the integrity and availability of the system, related to the Import Server in the Oracle Document Capture component. It is claimed that remote attackers...

CVE-2010-3599: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU...

CVE-2010-3592: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Internal Operations...

PT-2011-1412

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects confidentiality, integrity, and availability. It is related to Internal Operations in the Oracle Document Capture component. There are claims that remote...

PT-2011-1416

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects confidentiality and is related to the Import Server in the Oracle Document Capture component. Details about exploitation include the ImportBodyText metho...

HTTP Client MS Credential Catcher

This module attempts to quietly catch NTLM/LM Challenge hashes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework NTLMCONST = Rex::Proto::NTLM::Constants NTLMCRYPT = Rex::Proto::NTLM::Crypt MESSAGE =...