• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Oracle Application Server Web Cache HTTP Request Method Heap Overrun Vulnerability

Solution:
Oracle Application Server Web Cache 10g (9.0.4.0) includes fixes for Windows, Tru64 and AIX (release pending). Other platforms for this release are still vulnerable. Users should upgrade to this release if they are using one of the platforms that includes fixes. Other fixes for this release are pending.

Oracle has released a Patch Availability Matrix which details available and pending fixes for various platforms and releases. Further details may be found in the attached advisory.

Oracle has released an update to their original advisory clarifying the E-Business statement and adding the appropriate credits. Please see the referenced advisory for more information.