CVE-2005-3446: Critical severity Oracle Application Server vulnerability

Published Nov 2, 2005

Updated

Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.

Affected Software

7 affected components

Oracle Application Server=9.0.2.3

Oracle Application Server=9.0.3.1

Oracle Application Server=9.0.4.1

Oracle Application Server=9.0.4.2

Oracle Application Server=10.1.2.0.0

Oracle Database Server=9.2.0.5

Oracle Database Server=9.2.0.6

Event History

Nov 2, 2005

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3446?

The severity of CVE-2005-3446 is currently unspecified, with unknown impact and attack vectors.

How do I fix CVE-2005-3446?

Fixing CVE-2005-3446 may involve upgrading to a secure version of Oracle Database Server or Application Server, though specific mitigation steps are not detailed.

Which versions are affected by CVE-2005-3446?

CVE-2005-3446 affects Oracle Database Server versions up to 9.2.0.6 and Application Server versions up to 10.1.2.0.

What types of products are impacted by CVE-2005-3446?

CVE-2005-3446 impacts both Oracle Database Server and Oracle Application Server products.

Is there a patch available for CVE-2005-3446?

There is no explicit patch mentioned for CVE-2005-3446, and it is recommended to check Oracle's resources for updates.