CVE-2005-3445: Critical severity Oracle Application Server vulnerability

Published Nov 2, 2005

Updated

Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.

Affected Software

15 affected components

Oracle Application Server=1.0.2.2

Oracle Application Server=9.0.2.3

Oracle Application Server=9.0.3.1

Oracle Application Server=9.0.4.1

Oracle Application Server=9.0.4.2

Oracle Application Server=10.1.2.0.0

Oracle Application Server=10.1.2.0.1

Oracle Application Server=10.1.2.0.2

Oracle Database Server=8.1.7.4

Oracle Database Server=9.2.0.5

Oracle Database Server=9.2.0.6

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.3

Oracle Database Server=10.1.0.4

Oracle Database Server=10.1.0.4.2

Event History

Nov 2, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3445?

The severity of CVE-2005-3445 is currently unknown as it is categorized as multiple unspecified vulnerabilities.

How do I fix CVE-2005-3445?

To fix CVE-2005-3445, it is recommended to update Oracle Database Server and Application Server to the latest patched version.

Which Oracle products are affected by CVE-2005-3445?

CVE-2005-3445 affects Oracle Database Server versions 8i to 10.1.0.4.2 and Application Server versions 1.0.2.2 to 10.1.2.0.

What are the potential impacts of CVE-2005-3445?

The potential impacts of CVE-2005-3445 include unknown attack vectors and vulnerability exploitation leading to security breaches.

Is there a workaround for CVE-2005-3445?

Currently, there are no documented workarounds for CVE-2005-3445, making updating to a secure version the best option.