PT-2007-3465 · Oracle · Oracle Application Server

Published 2007-04-18 · Updated 2018-10-16 · CVE-2007-2123

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Server versions 9.0.4.3 Oracle Application Server versions 10.1.2 up to 10.1.2.2.0 Oracle Application Server versions 10.1.3 up to 10.1.3.2.0

Description The issue concerns an unspecified vulnerability in the Portal component of Oracle Application Server. The impact and attack vectors of this issue are unknown.

Recommendations For Oracle Application Server version 9.0.4.3, update to a version that contains a fix for this issue. For Oracle Application Server versions 10.1.2 up to 10.1.2.2.0, update to a version that contains a fix for this issue. For Oracle Application Server versions 10.1.3 up to 10.1.3.2.0, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-2123

Affected Products

Oracle Application Server

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2123 · Security Note
• http://securityfocus.com/archive/1/466329/100/200/threaded · Vendor Advisory
• http://red-database-security.com/advisory/oracle_cpu_apr_2007.html · Note
• http://vupen.com/english/advisories/2007/1426 · Note
• http://securitytracker.com/id?1017927 · Note
• http://securityfocus.com/bid/23532 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2123 · Note
• http://us-cert.gov/cas/techalerts/TA07-108A.html · Note
• http://oracle.com/technetwork/topics/security/cpuapr2007-090632.html · Note