-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID : GCSA-10158
Data : 14 Ottobre 2010
Titolo : Oracle Critical Patch Update (Ottobre 2010)
******************************************************************
:: Descrizione del problema
Oracle ha rilasciato una Critical Patch Update per il mese di
ottobre 2010 con lo scopo di correggere numerose vulnerabilita'
presenti in vari prodotti e componenti Oracle e Sun Product Suite.
:: Software interessato
Oracle Database 11g Release 2, versione 11.2.0.1
Oracle Database 11g Release 1, versione 11.1.0.7
Oracle Database 10g Release 2, versioni 10.2.0.3 e 10.2.0.4
Oracle Database 10g, versione 10.1.0.5
Oracle Fusion Middleware, 11gR1, versioni 11.1.1.1.0, 11.1.1.2.0
Oracle Application Server, 10gR3, versione 10.1.3.5.0
Oracle Application Server, 10gR2, versione 10.1.2.3.0
Oracle BI Publisher, versioni 10.1.3.3.2, 10.1.3.4.0, 10.1.3.4.1
Oracle Identity Management 10g, versioni 10.1.4.0.1, 10.1.4.3
Oracle E-Business Suite Release 12, versioni 12.0.4, 12.0.5, 12.0.6,
12.1.1 e 12.1.2
Oracle E-Business Suite Release 11i, versioni 11.5.10 e 11.5.10.2
Agile PLM, versione 9.3.0.0
Oracle Transportation Management, versioni 5.5, 6.0 e 6.1
PeopleSoft Enterprise CRM, FMS, HCM, SCM (Supply Chain) versioni 8.9,
9.0 e 9.1
PeopleSoft Enterprise EPM, Campus Solutions versioni 8.9, 9.0 e 9.1
PeopleSoft Enterprise PeopleTools versioni 8.49 e 8.50
Siebel Core, versioni 7.7, 7.8, 8.0 and 8.1
Primavera P6 Enterprise Project Portfolio Management, Versions:
6.21.3.0, 7.0.1.0
Oracle Sun Product Suite
Oracle VM, version 2.2.1
:: Impatto
Esecuzione remota di codice o comandi arbitrari
Information disclosure
Denial of service
Accesso ad informazioni sensibili
:: Soluzioni
Applicare le patch appropriate o procedere all'opportuno
aggiornamento secondo le istruzioni rilasciate da Oracle
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2010-175626.html
:: Riferimenti
Oracle Critical Patch Update Advisory - Luglio 2010
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2010-175626.html
Sun Security Blog
http://blogs.sun.com/security/
Secunia
http://secunia.com/advisories/39504/
http://secunia.com/advisories/41815/
http://secunia.com/advisories/41827/
http://secunia.com/advisories/41830/
http://secunia.com/advisories/41831/
http://secunia.com/advisories/41794/
http://secunia.com/advisories/41762/
http://secunia.com/advisories/41791/
http://secunia.com/advisories/41832/
http://secunia.com/advisories/41780/
http://secunia.com/advisories/41782/
http://secunia.com/advisories/41828/
http://secunia.com/advisories/41829/
http://secunia.com/advisories/41835/
http://secunia.com/advisories/41836/
http://secunia.com/advisories/41837/
http://secunia.com/advisories/41783/
http://secunia.com/advisories/41758/
http://secunia.com/advisories/41818/
VUPEN
http://www.vupen.com/english/advisories/2010/2639
http://www.vupen.com/english/advisories/2010/2640
http://www.vupen.com/english/advisories/2010/2641
http://www.vupen.com/english/advisories/2010/2642
http://www.vupen.com/english/advisories/2010/2643
http://www.vupen.com/english/advisories/2010/2644
http://www.vupen.com/english/advisories/2010/2645
http://www.vupen.com/english/advisories/2010/2646
http://www.vupen.com/english/advisories/2010/2647
http://www.vupen.com/english/advisories/2010/2648
http://www.vupen.com/english/advisories/2010/2649
Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2493
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2950
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3301
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3302
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0395
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2388
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2389
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2390
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2395
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2396
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2404
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2405
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2413
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2414
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2416
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2417
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2418
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2419
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3500
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3501
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3502
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3503
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3504
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3506
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3507
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3508
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3509
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3512
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3513
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3514
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3515
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3516
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3517
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3518
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3519
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3520
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3521
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3522
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3523
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3524
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3525
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3526
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3527
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3528
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3529
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3530
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3531
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3532
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3533
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3534
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3535
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3536
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3538
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3539
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3540
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3541
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3544
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3545
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3549
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3552
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3553
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3554
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3556
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3557
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3559
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3560
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3561
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3562
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3563
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3564
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3565
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3567
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3568
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3570
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3573
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3575
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3576
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3579
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3581
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3582
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3584
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3585
-----BEGIN PGP SIGNATURE-----
iQCVAwUBTLcYQfOB+SpikaiRAQL8yQP+OO6/R/vG9k1dtFXr9aGx/6ciO2fV1rR4
Yu9LsLX4pkZQQrsC3sL+mujV8yOgXVncq8LThMc7ZT67vaRqsik6B6Ef5p8JMLb3
Fkk2oZ28E6jBdDKPU4TzZBcQHF0awJTCcixEubmHyjZs02bRu6HAaAv/vmMd1lYo
JKWiTtsuvew=
=eP5L
-----END PGP SIGNATURE-----