Oracle.Database.Client.System.Analyzer.Arbitrary.File.Upload
Description
This indicates an attack attempt against an arbitrary File Upload vulnerability in Oracle Database Server and Enterprise Manager Grid Control.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to upload an arbitrary file via sending a crafted URI to a vulnerable application.
Affected Products
Oracle Oracle11g Standard Edition One 11.1 6
Oracle Oracle11g Standard Edition 11.1 6
Oracle Oracle11g Standard Edition 11.1 .7
Oracle Oracle11g Standard Edition 11.2.0.1.0
Oracle Oracle11g Enterprise Edition 11.1 6
Oracle Oracle11g Enterprise Edition 11.2.0.1.0
Oracle Oracle11g Enterprise Edition 11.1.0.7
Oracle Enterprise Manager Grid Control 10g 10.2.0.5
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Please download and apply patches as instructed in:
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
Please note that the signature requires SSL deep scan in FortiOS 5.0.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |