PT-2007-3465 · Oracle · Oracle Application Server

Publicado 2007-04-18 · Atualizado 2018-10-16 · CVE-2007-2123

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Server versions 9.0.4.3 Oracle Application Server versions 10.1.2 up to 10.1.2.2.0 Oracle Application Server versions 10.1.3 up to 10.1.3.2.0

Description The issue concerns an unspecified vulnerability in the Portal component of Oracle Application Server. The impact and attack vectors of this issue are unknown.

Recommendations For Oracle Application Server version 9.0.4.3, update to a version that contains a fix for this issue. For Oracle Application Server versions 10.1.2 up to 10.1.2.2.0, update to a version that contains a fix for this issue. For Oracle Application Server versions 10.1.3 up to 10.1.3.2.0, update to a version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-2123

Produtos afetados

Oracle Application Server

Referências · 9

• http://red-database-security.com/advisory/oracle_cpu_apr_2007.html · Nota
• http://vupen.com/english/advisories/2007/1426 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2123 · Nota de Segurança
• http://securitytracker.com/id?1017927 · Nota
• http://securityfocus.com/bid/23532 · Nota
• http://securityfocus.com/archive/1/466329/100/200/threaded · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2123 · Nota
• http://us-cert.gov/cas/techalerts/TA07-108A.html · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2007-090632.html · Nota