CVE-2007-2123 - Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2

CVE-2007-2123

Summary

Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.

References

Vulnerable Configurations

cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.3.2.0:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 16-10-2018 - 16:42)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	23532
cert	TA07-108A
confirm	http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html
hp	HPSBMA02133 SSRT061201
misc	http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html
sectrack	1017927
vupen	ADV-2007-1426

saint via4

bid	23532
description	Oracle Database Advanced Replication component DBMS_SNAP_INTERNAL overflow
id	database_oracle_version
osvdb	39933
title	oracle_advrep_snap_internal
type	remote

Last major update

16-10-2018 - 16:42

Published

18-04-2007 - 18:19

Last modified

16-10-2018 - 16:42