TRTA07-017A
Oracle 製品に複数の脆弱性

Oracle 製品およびそのコンポーネントに複数の脆弱性が存在します。

影響を受けるシステム
　- Oracle Database
　- Oracle Application Server
　- Oracle HTTP Server (Apache)
　- Oracle Identity Management
　- Oracle Enterprise Manager Grid Control
　- Oracle E-Business Suite
　- Oracle Collaboration Suite
　- Oracle PeopleSoft Enterprise PeopleTools
　- Oracle Life Sciences Applications (formerly Oracle Pharmaceutical Applications)

　上記以外の複数の製品あるいはコンポーネントも影響を受ける可能性があります。詳しくは、Oracle Critical Patch Update - January 2007 をご確認ください。

日時 (JST)	内容
2007-01-26	Application Security Inc. Oracle Database Buffer overflow vulnerabilities in procedure DBMS_LOGMNR.ADD_LOGFILE (DB04)
2007-01-26	Application Security Inc. Oracle Database Buffer overflow vulnerabilities in procedure DBMS_REPCAT_UNTRUSTED.UNREGISTER_SNAPSHOT (DB07)
2007-01-26	Application Security Inc. Oracle Database Buffer overflow vulnerabilities in procedures of package DBMS_CAPTURE_ADM_INTERNAL (DB09)
2007-01-19 19:54	日本オラクル Oracle Critical Patch Update - January 2007
2007-01-18 01:01	US-CERT TA07-017A: Oracle Releases Patches for Multiple Vulnerabilities US-CERT メーリングリスト経由で Technical Cyber Security Alert 受信
2007-01-18	Application Security Inc. Oracle Database Buffer overflow vulnerability in procedure DBMS_LOGREP_UTIL.GET_OBJECT_NAME (DB08)
2007-01-18	Application Security Inc. Oracle Database Buffer overflow vulnerabilities in procedure DBMS_DRS.GET_PROPERTY (DB03)
2007-01-18	Application Security Inc. Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD (DB05)

1. Technical Cyber Security Alert TA07-017A
   Oracle Releases Patches for Multiple Vulnerabilities
2. Vendor Status Note JVNTA07-017A
   Oracle 製品に複数の脆弱性