This host is running Oracle database or application server and is prone to unspecified vulnerability.

Successful exploitation allows an attackers to execute arbitrary code or commands in context of the affected application, information disclosure and denial of service. Impact Level: Application

Apply patches from below link, http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html

The flaw is due to unspecified error in Oracle ultra search component.

Oracle Database server versions 9.2.0.8, 10.1.0.5 and 10.2.0.3 Oracle Application server versions 9.0.4.3 and 10.1.2.0.2

• http://securitytracker.com/id?1019218
• http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm
• http://www.securityfocus.com/archive/1/archive/1/487322/100/100/threaded
• http://www.us-cert.gov/cas/techalerts/TA08-017A.html

---

Updated on 2015-03-25