Oracle warns of serious vulnerabilities in HTTP server products

On September 21, according to foreign media reports, Oracle has advised administrators to update the system because of a significant security breach found in the company's HTTP server products based on Apache 2.0 or 2.2. The vulnerability component, which exists in the Fusion middleware 11g and creator Server 10g platform, triggers a denial-of-service attack. This vulnerability can be exploited remotely, without the need for a local login or a user name password and other legal authentication. More complete details can be found in the Oracle Security Warning cve-2011-3192.

Oracle's update follows Microsoft's latest patch update, which includes five security fixes and an update to remove several Digitnotar certificates. Several days ago, the Digitnotar certificate was proven to be exploited by hackers.

In addition, Oracle plans to deliver an update to its system platform.

(Responsible editor: The good of the Legacy)