CVE:CVE-2010-2390
CNNVD:CNNVD-201010-175
Grid Control是为整个Oracle IT架构提供中心化监视、管理、生命周期管理功能的系统管理软件。
远程攻击者可以通过向Grid Control的EM Console组件提交超长的HTTP请求触发缓冲区溢出，导致执行任意指令。
solution:Upgrade oracle database_server to a higher version than 10.1.0.5,10.2.0.3,and avoid the version 10.1.0.5,10.2.0.3; Upgrade oracle fusion_middleware to a higher version than 10.1.2.3,10.1.4.3,and avoid the version 10.1.2.3,10.1.4.3; Upgrade oracle enterprise_manager_grid_control to a higher version than *