Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2009-04-15T10:00:00
Updated: 2024-08-07T04:57:17.507Z
Reserved: 2009-03-19T00:00:00
Link: CVE-2009-0993
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-04-15T10:30:00.687
Modified: 2024-11-21T01:01:24.867
Link: CVE-2009-0993
Redhat
No data.