Oracle数据库系统 05年10月更新修复多个安全漏洞

来源：瑞星编译作者：出处：巧巧读书 2006-03-18 进入讨论组

受影响系统：

Oracle E-Business Suite 11i 11.5.9
Oracle E-Business Suite 11i 11.5.8
Oracle E-Business Suite 11i 11.5.7
Oracle E-Business Suite 11i 11.5.6
Oracle E-Business Suite 11i 11.5.5

Oracle E-Business Suite 11i 11.5.4
Oracle E-Business Suite 11i 11.5.3
Oracle E-Business Suite 11i 11.5.2
Oracle E-Business Suite 11i 11.5.10 CU2
Oracle E-Business Suite 11i 11.5.10
Oracle E-Business Suite 11i 11.5.1
Oracle E-Business Suite 11.0
Oracle Oracle9i Database Server Release 2 9.2.0.7
Oracle Oracle9i Database Server Release 2 9.2.0.6
Oracle Oracle9i Database Server Release 2 9.2.0.5
Oracle Oracle8i Database Server Release 3 8.1.7.4
Oracle Enterprise Manager Grid Control 10g 10.1.0.4
Oracle Enterprise Manager Grid Control 10g 10.1.0.3
Oracle Database Server 10g Release 1 10.1.0.4
Oracle Database Server 10g Release 1 10.1.0.3
Oracle Application Server 10g Release 2 10.1.2.0.2
Oracle Application Server 10g Release 2 10.1.2.0.1
Oracle Application Server 10g Release 2 10.1.2.0.0
Oracle Application Server 10g Release 1 (9.0.4) 9.0.4.2
Oracle Application Server 10g Release 1 (9.0.4) 9.0.4.1
Oracle Collaboration Suite 10g Release 1 10.1.1
Oracle Oracle9i Collaboration Suite Release 2 9.0.4.2
Oracle Clinical 4.5.1
Oracle Clinical 4.5.0
Oracle PeopleSoft Enterprise Tools 8.1 - 8.46.03
Oracle PeopleSoft CRM 8.81 - 8.9
Oracle JD Edwards EnterpriseOne/OneWorld XE, SP23_K1
Oracle JD Edwards EnterpriseOne/OneWorld XE, 8.95_B1
Oracle JD Edwards EnterpriseOne/OneWorld XE, 8.94_Q1

详细描述：

Oracle Database是一款商业性质大型数据库系统。

各种Oracle数据库服务器、Oracle企业管理器、Oracle应用服务器、Oracle协作组件、Oracle电子商务组件和应用、Oracle PeopleSoft Enterprise和JD Edwards EnterpriseOne受多个漏洞影响。

这些漏洞可能是本地或远程漏洞，影响Oracle产品的所有安全属性。攻击者可能利用这些漏洞破坏服务器的保密性、完整性或可用性，或执行任意代码。目前更多信息不详。

补丁下载：

Oracle
------
Oracle已经为此发布了一个安全公告（cpuoct2005）以及相应补丁:
cpuoct2005：Oracle Critical Patch Update - October 2005
链接：http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html