CVE - CVE-2003-1116

CVE-ID
CVE-2003-1116	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:7325 URL:http://www.securityfocus.com/bid/7325 BUGTRAQ:20030411 Integrigy Security Advisory - Oracle Applications FNDFS Vulnerability URL:http://marc.info/?l=bugtraq&m=105012832418415&w=2 CERT-VN:VU#168873 URL:http://www.kb.cert.org/vuls/id/168873 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf MISC:http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm SECTRACK:1006550 URL:http://securitytracker.com/id?1006550 XF:oracle-rra-authentication-bypass(11768) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/11768
Assigning CNA
MITRE Corporation
Date Record Created
20050311	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050311)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)