Update Protection against Oracle TimesTen evtdump Remote Format String Vulnerability
| Check Point Reference: | CPAI-2009-021 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Secunia Advisory: SA33525 | |
| Industry Reference(s): | CVE-2008-5440 | |
| Protection Provided by: |
VPN-1
|
|
| Who is Vulnerable? Oracle TimesTen In-Memory Database 7.0.5.0.0 | ||
| Vulnerability Description A format string error vulnerability was reported in Oracle TimesTen In-memory Database. Oracle TimesTen In-Memory Database is a product for real-time data management and is used for performance-critical functions in environments like real-time enterprises, telecom, capital markets and defense. The flaw is due to an input error when processing HTTP requests sent to a vulnerable installation of Oracle TimeTen. Remote authenticated attackers can exploit this vulnerability by sending specially crafted messages to the affected interface. Successful exploitation can lead to arbitrary code execution. |
||
|
Update/Patch Available Apply patches: Oracle Critical Patch Update Advisory |
|
|
Vulnerability Details The specific flaw resides in the evtdump CGI module, a module used for writing to an internal log file. The parameter 'msg' does not properly sanitize format string tokens, potentially leading to execution of arbitrary code. |
Protection Overview
By enabling this protection, SmartDefense will detect and block attempts exploit the format string vulnerability in Oracle's evtdump CGI.
In order for the protection to be activated, update your VPN-1/InterSpect product to the latest SmartDefense update. For information on how to update SmartDefense, go to SBP-2006-05, Protection tab and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.