----------------------------------------------------------------------


  Secunia CSI
+ Microsoft SCCM
-----------------------
= Extensive Patch Management

http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/


----------------------------------------------------------------------

TITLE:
Sun Cluster Data Service for Oracle E-Business Suite Vulnerabilities

SECUNIA ADVISORY ID:
SA39429

VERIFY ADVISORY:
http://secunia.com/advisories/39429/

DESCRIPTION:
Two vulnerabilities have been reported in Sun Cluster, which can be
exploited by malicious, local users to disclose sensitive
information.

1) An error in the implementation of a command line utility can be
exploited to disclose application passwords.

2) An unspecified error in the Data Service for Oracle E-Business
Suite component can be exploited to disclose certain data.

SOLUTION:
Apply patches.

Sun Cluster 3.1 (for Solaris 8):
Apply patch 143047-02 or later.

Sun Cluster 3.1 (for Solaris 9):
Apply patch 143048-02 or later.

Sun Cluster 3.1 (for Solaris 10):
Apply patch 143049-02 or later.

Solaris Cluster 3.2 (for Solaris 9):
Apply patch 126049-05 or later.

Solaris Cluster 3.2 (for Solaris 10):
Apply patch 126050-05 or later.

PROVIDED AND/OR DISCOVERED BY:
It is currently unclear who reported these vulnerabilities as the
Oracle Critical Patch Update for April 2010 only provides a bundled
list of credits. This section will be updated when/if the original
reporter provides more information.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-276130-1
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------