Signature Detail

DB: Oracle Emanagement Overflow

This signature detects attempts to exploit a known vulnerability in the Oracle Emanagement application. Attackers can send malicious HTTP requests designed to trigger a buffer overflow. A successful attack can lead to arbitrary remote code execution within the context of the Oracle application.

Extended Description

Oracle Application Server 10g is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with SYSTEM privileges. This vulnerability was originally described in Oracle October Security Update Multiple Vulnerabilities (BID 15134). Due to the availability of additional information, it has been assigned its own record.

Affected Products

• Oracle Application Server 10g 10.1.2

References

• BugTraq: 15146
• CVE: CVE-2005-3460
• URL: http://www.oracle.com/technology/deploy/security/pdf/cpuoct2005.html
• URL: http://www.securityfocus.com/archive/1/413957