This host is installed with Oracle Database Server and is prone to multiple information disclosure vulnerabilities.

Successful exploitation will allow attackers to cause denial of service condition or obtain sensitive information. Impact Level: Application

Apply patches from below link, http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html ***** NOTE: Ignore this warning if above mentioned patch is installed. *****

Multiple flaws exist in Core RDBMS and Spatial component, no further information available at this moment.

Oracle Database Server version 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 are affected

Get the installed version with the help of tnslsnr service and check it is vulnerable or not.

• http://osvdb.org/102080
• http://osvdb.org/102081
• http://osvdb.org/102082
• http://secunia.com/advisories/56452
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

---

Updated on 2015-03-25