PT-2005-4241 · Oracle · Oracle Database Server+1

Published 2005-11-02 · Updated 2012-10-23 · CVE-2005-3445

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 8i through 10.1.0.4.2 Oracle Application Server versions 1.0.2.2 through 10.1.2.0

Description The issue involves multiple unspecified vulnerabilities in the HTTP Server component of Oracle Database Server and Application Server. The impact and attack vectors of these vulnerabilities are unknown.

Recommendations For Oracle Database Server versions 8i through 10.1.0.4.2, at the moment, there is no information about a newer version that contains a fix for this issue. For Oracle Application Server versions 1.0.2.2 through 10.1.2.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3445

Affected Products

Oracle Application Server

Oracle Database Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-3445 · Security Note
• http://secunia.com/advisories/17250 · Note
• http://kb.cert.org/vuls/id/890940 · Note
• http://securityfocus.com/bid/15134 · Note
• http://kb.cert.org/vuls/id/210524 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3445 · Note
• http://us-cert.gov/cas/techalerts/TA05-292A.html · Note
• http://oracle.com/technetwork/topics/security/cpuoct2005-090497.html · Note