PT-2005-4243 · Oracle · Oracle Database Server+1

Published 2005-11-02 · Updated 2012-10-23 · CVE-2005-3447

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions prior to 10.1.0.4.2 Oracle Application Server versions prior to 9.0.4.2

Description The issue concerns an unspecified vulnerability in Single Sign-On. The impact and attack vectors of this issue are unknown.

Recommendations For Oracle Database Server versions prior to 10.1.0.4.2, update to a version that addresses this issue. For Oracle Application Server versions prior to 9.0.4.2, update to a version that addresses this issue.

Fix

Related Identifiers

CVE-2005-3447

Affected Products

Oracle Application Server

Oracle Database Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3447 · Security Note
• http://secunia.com/advisories/17250 · Note
• http://kb.cert.org/vuls/id/210524 · Note
• http://us-cert.gov/cas/techalerts/TA05-292A.html · Note
• http://securityfocus.com/bid/15134 · Note
• http://oracle.com/technetwork/topics/security/cpuoct2005-090497.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3447 · Note