CVE-2003-1116

Severity

50%

Complexity

99%

Confidentiality

48%

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:N/A:N).

Overview

Type

Oracle E-Business Suite

First reported 21 years ago

2003-12-31 05:00:00

Last updated 7 years ago

2017-07-11 01:29:00

Affected Software

Oracle E-Business Suite 10.7

10.7

Oracle E-Business Suite 11.0

11.0

Oracle E-Business Suite 11i 11.1

11.1

Oracle E-Business Suite 11i 11.2

11.2

Oracle E-Business Suite 11i 11.3

11.3

Oracle E-Business Suite 11i 11.4

11.4

Oracle E-Business Suite 11i 11.5

11.5

Oracle E-Business Suite 11i 11.6

11.6

Oracle E-Business Suite 11i 11.7

11.7

Oracle E-Business Suite 11i 11.8

11.8

References

20030411 Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability

http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf

Patch, Vendor Advisory

1006550

Patch

http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm

VU#168873

Third Party Advisory, US Government Resource

7325