PT-2005-4250 · Oracle · Calendar+3

David Litchfield · Published 2005-11-02 · Updated 2012-10-23 · CVE-2005-3454

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Collaboration Suite 10g Release 1 version 10.1.1 Oracle Collaboration Suite 9i Release 2 version 9.0.4.2

Description The issue affects multiple components of Oracle Collaboration Suite, including Calendar, Email Server, and Oracle Files, with unknown impact and attack vectors.

Recommendations For Oracle Collaboration Suite 10g Release 1 version 10.1.1, update to a version that addresses the identified vulnerabilities. For Oracle Collaboration Suite 9i Release 2 version 9.0.4.2, update to a version that addresses the identified vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3454

Affected Products

Calendar

Email Server

Oracle Collaboration Suite

Oracle Files

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3454 · Security Note
• http://secunia.com/advisories/17250 · Note
• http://kb.cert.org/vuls/id/210524 · Note
• http://us-cert.gov/cas/techalerts/TA05-292A.html · Note
• http://securityfocus.com/bid/15134 · Note
• http://oracle.com/technetwork/topics/security/cpuoct2005-090497.html · Note