{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eOracle Database 10g Release 1, version 10.1.0.2 ;\u003c/LI\u003e    \u003cLI\u003eOracle9i Database Server Release 2, versions 9.2.0.4 et    9.2.0.5 ;\u003c/LI\u003e    \u003cLI\u003eOracle9i Database Server Release 1, versions 9.0.1.4,    9.0.1.5 et 9.0.4 ;\u003c/LI\u003e    \u003cLI\u003eOracle8i Database Server Release 3, version 8.1.7.4 ;\u003c/LI\u003e    \u003cLI\u003eOracle Entreprise Manager Grid Control 10g, version    10.1.0.2 ;\u003c/LI\u003e    \u003cLI\u003eOracle Entreprise Manager Database Control 10g, version    10.1.0.2 ;\u003c/LI\u003e    \u003cLI\u003eOracle Application Server 10g (9.0.4), versions 9.0.4.0 et    9.0.4.1 ;\u003c/LI\u003e    \u003cLI\u003eOracle9i Application Server Release 2, versions 9.0.2.3 et    9.0.3.1 ;\u003c/LI\u003e    \u003cLI\u003eOracle9i Application Server Release 1, version    1.0.2.2.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eces vuln\u00e9rabilit\u00e9s n\u0027affectent pas les versions suivantes  :\u003c/P\u003e  \u003cUL\u003e    \u003cLI\u003eOracle Database 10g Release 1, version 10.1.0.3 ;\u003c/LI\u003e    \u003cLI\u003eOracle Entreprise Manager Grid Control 10g, version    10.1.0.3 ;\u003c/LI\u003e    \u003cLI\u003eOracle Application Server 10g (9.0.4), version    9.0.4.2.\u003c/LI\u003e  \u003c/UL\u003e",
  "content": "## Solution\n\nAppliquer les correctifs suivant la version affect\u00e9e :\n\n    http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT\u0026p_id=281189.1\n",
  "cves": [],
  "initial_release_date": "2004-09-01T00:00:00",
  "last_revision_date": "2004-09-03T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de NGS Software :",
      "url": "http://www.nextgenss.com/advisories/oracle-01.txt"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 d\u0027Int\u00e9grigy :",
      "url": "http://www.integrigy.com/alerts/OraAlert68OraAppsImpact.htm"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 de Pete Finnigan :",
      "url": "http://www.petefinnigan.com/alerts.htm"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 d\u0027Application Security :",
      "url": "http://www.appsecinc.com/resources/alerts/oracle/2004-0001/"
    }
  ],
  "reference": "CERTA-2004-AVI-284",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-09-01T00:00:00.000000"
    },
    {
      "description": "ajout de d\u00e9tails et de documentations.",
      "revision_date": "2004-09-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans les produits Oracle\nDatabase Server, Entreprise Manager et Application Server permettant \u00e0\nun individu mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\nLes solutions Collaboration Suite et E-Business Suite 11i int\u00e9grant ces\nproduits sont \u00e9galement affect\u00e9s par ces vuln\u00e9rabilit\u00e9s.\n",
  "title": "Nombreuses vuln\u00e9rabilit\u00e9s dans les produits Oracle",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Alerte de s\u00e9curit\u00e9 #68 d\u0027Oracle",
      "url": "http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf"
    }
  ]
}