CVE-2010-4449 - Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote

CVE-2010-4449

Summary

Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this issue is related to a crafted parameter in an action.execute request to the av component on TCP port 5700.

References

Vulnerable Configurations

cpe:2.3:a:oracle:audit_vault:10.2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:audit_vault:10.2.3.2:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 17-08-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	45844
confirm	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
misc	http://www.zerodayinitiative.com/advisories/ZDI-11-017/
osvdb	70583
sectrack	1024973
secunia	42919
vupen	ADV-2011-0141
xf	oracle-vault-av-code-execution(64762)

Last major update

17-08-2017 - 01:33

Published

19-01-2011 - 17:00

Last modified

17-08-2017 - 01:33