CVE-2006-5353 - Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1

CVE-2006-5353

Summary

Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01.

References

Vulnerable Configurations

cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:collaboration_suite:10.1.2.0:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 17-10-2018 - 21:42)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	20588
cert	TA06-291A
confirm	http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
hp	HPSBMA02133 SSRT061201
misc	http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
sectrack	1017077
secunia	22396
vupen	ADV-2006-4065

saint via4

bid	20588
description	Oracle Spatial component SDO_CS.TRANSFORM_LAYER buffer overflow
id	database_oracle_version
osvdb	31462
title	oracle_spatial_transform_layer
type	remote

Last major update

17-10-2018 - 21:42

Published

18-10-2006 - 01:07

Last modified

17-10-2018 - 21:42