CVE-2003-1116

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

• http://marc.info/?l=bugtraq&m=105012832418415&w=2
• http://otn.oracle.com/deploy/security/pdf/2003alert53.pdfPatch, Vendor Advisory
• http://securitytracker.com/id?1006550Patch
• http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
• http://www.kb.cert.org/vuls/id/168873Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/7325Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11768
• http://marc.info/?l=bugtraq&m=105012832418415&w=2
• http://otn.oracle.com/deploy/security/pdf/2003alert53.pdfPatch, Vendor Advisory
• http://securitytracker.com/id?1006550Patch
• http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
• http://www.kb.cert.org/vuls/id/168873Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/7325Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11768

Published

Dec 31, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1110The Session Initiation Protocol (SIP) implementation in Colu…
• CVE-2003-1111The Session Initiation Protocol (SIP) implementation in mult…
• CVE-2003-1112The Session Initiation Protocol (SIP) implementation in Inga…
• CVE-2003-1113The Session Initiation Protocol (SIP) implementation in IPTe…
• CVE-2003-1114The Session Initiation Protocol (SIP) implementation in Medi…
• CVE-2003-1115The Session Initiation Protocol (SIP) implementation in Nort…
• CVE-2003-1117Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and R…
• CVE-2003-1118Buffer overflow in the SETI@home client 3.03 and other versi…
• CVE-2003-1119SSH Secure Shell before 3.2.9 allows remote attackers to cau…
• CVE-2003-1120Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix…
• CVE-2003-1121Services in ScriptLogic 4.01, and possibly other versions be…
• CVE-2003-1122ScriptLogic 4.01, and possibly other versions before 4.14, u…