Multiple vulnerabilities have been reported in Oracle JD Edwards EnterpriseOne Tools, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

1) An error in the JDENet component when processing size values of certain packets can be exploited to consume CPU resources via a specially crafted packet sent to TCP port 6015.

2) An error in the JDENet component when processing certain message types can be exploited to disclose some system details (e.g. process IDs and information) via specially crafted packets sent to TCP port 6015.

3) An error in the JDENet component when processing certain messages can be exploited to disclose the password of an arbitrary user via a specially crafted packet sent to TCP port 6015.

Successful exploitation of this vulnerability requires the Security Kernel to be enabled and SignonSecurity configured.

4) An error in the JDENet component when processing certain messages can be exploited to enumerate certain data (e.g. user, role, and environment) via specially crafted packets sent to TCP port 6015.

5) An error in the Server Administration Workbench (SAW) component can be exploited to download arbitrary files via a specially crafted packet sent to TCP port 6015.

6) An error in the Server Administration Workbench (SAW) component can be exploited to modify the JDE.INI configuration file via a specially crafted packet sent to TCP port 6015.

7) An error in the Server Administration Workbench (SAW) component can be exploited to disclose the contents of the JDE.INI configuration file via a specially crafted packet sent to TCP port 6015.

8) An error in the JDENet component when processing certain messages can be exploited to upload an arbitrary file via a specially crafted file packet sent to TCP port 6015.

The vulnerabilities are reported in version 8.98.

Solution
Apply updates (please see the vendor's advisory for details).

Provided and/or discovered by
Juan Pablo Perez Etchegoyen, Onapsis Research Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Oracle:
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html#AppendixJDE

Onapsis Research Labs:
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0393.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0394.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0387.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0388.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0389.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0390.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0391.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-02/0392.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers