Description
Unspecified vulnerability in the Oracle GoldenGate Veridata component in Oracle Fusion Middleware 3.0.0.4 allows remote attackers to affect availability via unknown vectors related to Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party researcher that this is a buffer overflow via a crafted XML soap request and a value that does not contain the expected 0x20 terminator character.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:N/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/42979Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
- http://www.securityfocus.com/bid/45868
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-019/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64775
- http://secunia.com/advisories/42979Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
- http://www.securityfocus.com/bid/45868
- http://www.securitytracker.com/id?1024981
- http://www.vupen.com/english/advisories/2011/0143Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-019/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64775
Timeline
- Published
- Jan 19, 2011
- Last modified
- Jun 16, 2026
- NVD status
- Modified