PT-2006-6077 · Oracle+1 · Oracle Application Server+2

Publicado 2006-10-18 · Atualizado 2018-10-17 · CVE-2006-5357

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Server versions 10.1.2.0.1 through 10.1.2.1.0

Description The issue is related to an unspecified vulnerability in the Oracle HTTP Server component, specifically concerning the PHP Module. It has unknown impact and is associated with remote attack vectors.

Recommendations For versions 10.1.2.0.1 through 10.1.2.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-5357

Produtos afetados

Oracle Application Server

Oracle Http Server

Php Module

Referências · 10

• http://securityfocus.com/archive/1/449711/100/0/threaded · Aviso do Fabricante
• http://secunia.com/advisories/22396 · Nota
• http://vupen.com/english/advisories/2006/4065 · Nota
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Nota
• http://securitytracker.com/id?1017077 · Nota
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Nota
• http://securityfocus.com/bid/20588 · Correção
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5357 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5357 · Nota