CVE

Id
46175  
CVE No.
CVE-2010-3591  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
502702 46175 CVE-2010-3591 BUGTRAQ:20110125 [DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method  View
502703 46175 CVE-2010-3591 URL:http://www.securityfocus.com/archive/1/archive/1/515959/100/0/threaded  View
502704 46175 CVE-2010-3591 EXPLOIT-DB:16055  View
502705 46175 CVE-2010-3591 URL:http://www.exploit-db.com/exploits/16055  View
502706 46175 CVE-2010-3591 MISC:http://dsecrg.com/pages/vul/show.php?id=305  View
502707 46175 CVE-2010-3591 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
502708 46175 CVE-2010-3591 BID:45851  View
502709 46175 CVE-2010-3591 URL:http://www.securityfocus.com/bid/45851  View
502710 46175 CVE-2010-3591 SECTRACK:1024981  View
502711 46175 CVE-2010-3591 URL:http://www.securitytracker.com/id?1024981  View
502712 46175 CVE-2010-3591 SECUNIA:42976  View
502713 46175 CVE-2010-3591 URL:http://secunia.com/advisories/42976  View
502714 46175 CVE-2010-3591 VUPEN:ADV-2011-0143  View
502715 46175 CVE-2010-3591 URL:http://www.vupen.com/english/advisories/2011/0143  View
502716 46175 CVE-2010-3591 XF:oracle-document-internaloperations-code-exec(64768)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30811 JVNDB-2011-001050 Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性 Oracle Fusion Middleware の Oracle Document Capture コンポーネントには、Import Server に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2010-3595 46175 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001050.html  View