Oracle Security Alert for CVE-2017-3629 versus the VLE, VSM6 or VSM7

Asset ID:	1-71-2279824.1
Update Date:	2017-06-23
Keywords:

Solution Type Technical Instruction Sure

Solution 2279824.1 : Oracle Security Alert for CVE-2017-3629 versus the VLE, VSM6 or VSM7

Applies to:

Sun Virtual Library Extension (VLE) - Version 1.0 to 1.5 [Release 1.0]
StorageTek Virtual Storage Manager System 6 (VSM6) - Version All Versions to All Versions [Release All Releases]
StorageTek Virtual Storage Manager System 7 (VSM7) - Version 7.0.0 to 7.1.1 [Release 7.0]
Information in this document applies to any platform.

Goal

Does Oracle Security Alert for CVE-2017-3629 apply to the VLE, VSM6 or VSM7?

Please note that information on the Oracle Security Alert for CVE-2017-3629 can also be found in MOS Doc ID 2277900.1.

Solution

To exploit this vulnerability, the user must first login to a node on the VLE or VSM system. It is not a network based vulnerability.

The VLE and VSM systems are currently maintained by Oracle Field Engineers who have login credentials to the system and they also have privileged access to the system.

Engineering management for the VLE, VSM6 and VSM7 has therefore determined there is not an additional exposure to the VLE or VSM products based on this CVE.

Attachments

This solution has no attachment