ID CVE-2006-3708
Summary Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 18-10-2018 - 16:49)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 19054
cert TA06-200A
confirm http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html
hp
  • HPSBMA02133
  • SSRT061201
misc http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html
sectrack 1016529
secunia
  • 21111
  • 21165
vupen
  • ADV-2006-2863
  • ADV-2006-2947
xf oracle-cpu-july-2006(27897)
Last major update 18-10-2018 - 16:49
Published 21-07-2006 - 14:03
Last modified 18-10-2018 - 16:49
Back to Top