PT-2010-2620 · Oracle · Oracle Sun Products Suite

Published 2010-04-13 · Updated 2017-08-17 · CVE-2010-0897

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Sun Product Suite versions 5.2 through 6.3.1

Description The issue affects confidentiality, integrity, and availability. It is related to Directory Service Markup Language. Details about real-world incidents where this issue was exploited are not provided. The estimated number of potentially affected devices worldwide is not available.

Recommendations For Oracle Sun Product Suite versions 5.2 through 6.3.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-0897

ZDI-10-073

ZDI-10-074

ZDI-10-075

Affected Products

Oracle Sun Products Suite

References · 9

• https://zerodayinitiative.com/advisories/ZDI-10-074 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-10-073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0897 · Security Note
• http://oracle.com/technetwork/topics/security/cpuapr2010-099504.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-075 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-276210-1 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57746 · Note
• http://us-cert.gov/cas/techalerts/TA10-103B.html · Note
• http://securityfocus.com/bid/39453 · Note