WaratekVRT Sign in

CVE-2010-4417 Oracle Beehive

Affected softwareOracle Beehive
Affected versions2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, 2.0.1.3
Severity7.5 High CVSS 2.0
Fixed inOracle Critical Patch Update January 2011
Published19 Jan 2011
Updated16 Jun 2026

Description

Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that voice-servlet/prompt-qa/Index.jspf does not properly handle null (%00) bytes in the evaluation parameter that is used in a filename, which allows attackers to create a file with an executable extension and execute arbitrary JSP code.

Exploitation status

Working exploit published

A reviewed exploit catalogue lists ready-to-run exploit code for this CVE.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC 2 indexed Published artifacts you can open, in Exploit-DB, Metasploit; first seen 2015-12-03.
  • EPSS 76% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99.5% of all scored CVEs.
IndexArtifactStarsFirst seen
Exploit-DB Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit) 2015-12-03
Metasploit Oracle BeeHive 2 voice-servlet processEvaluation() Vulnerability (excellent rank)

Waratek protection

Mitigation candidate

A kind of vulnerability Waratek's rules address, with exploit code published or exploitation reported. No rule exists and none is planned yet. The decision below says what we found to build a rule from.

  • Protection none
  • Action unverified
  • Review automated Inferred
  • Record active
Decided by An indexed exploit clearing the evidence bar to reverse-engineer, where there is no source to read
Finding Mitigation candidate: 2 public proof-of-concept exploit(s) are indexed for this CVE (exploit-db, metasploit), but the affected code is not open source. That makes an ARMR patch rule a candidate rather than a plan. The exploit gives a reproducible entry point to trace inward from and a test to validate a hook against, which is what makes reverse engineering tractable at all. No rule exists and none is scheduled: the hook point must be recovered by decompiling the affected code, and a closer look may find none that ARMR can act on.

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update January 2011 ↗ CPU 2011-Q1 Oracle Fusion Middleware / Services for Beehive (2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, 2.0.1.3)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Fusion Middleware Services for Beehive 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, 2.0.1.3 2.0.1.0 · 2.0.1.1 · 2.0.1.2 · 2.0.1.2.1 · 2.0.1.3

Products and versions

1 product, 5 version entries
SourceVendorProductSchemeAffected versions
nvd oracle beehive generic 2.0.1.0 · 2.0.1.1 · 2.0.1.2 · 2.0.1.2.1 · 2.0.1.3

References

URLTags
http://secunia.com/advisories/42978 Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html Vendor Advisory
http://www.securityfocus.com/bid/45854
http://www.securitytracker.com/id?1024981
http://www.vupen.com/english/advisories/2011/0143 Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-020/
https://exchange.xforce.ibmcloud.com/vulnerabilities/64772
https://www.exploit-db.com/exploits/38859/

Timeline
Published2011-01-19By the CVE Program.
NVD record modified2026-06-16NVD's own last-modified date for this record.