[Onapsis Security Advisory 2012-01] Oracle JD Edwards JDENET Arbitrary File Write

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory: Oracle JD Edwards JDENET Arbitrary File Write This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to beforehand...

CVE-2011-2317

CVE-2011-2317 affects Oracle JD Edwards JDENET/EnterpriseOne Tools 8.98 SP 24. Affected component: JD ENET/Tools in JD Edwards EnterpriseOne. Root cause: Arbitrary file write via a crafted File Packet sent to the JDENet port (default 6015), enabling a remote attacker to save files on the server. ...