CVE-2006-0285: Critical severity Oracle Application Server vulnerability

Published Jan 18, 2006

Updated

Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.

Affected Software

7 affected components

Oracle Application Server=10.1.2.0.2

Oracle Database Server=9.0.1.5

Oracle Database Server=8.1.7.4

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.7

Oracle Application Server=1.0.2.2

Oracle Application Server=9.0.4.2

Event History

Jan 18, 2006

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0285?

The exact severity of CVE-2006-0285 is unspecified, as the impact and attack vectors are not clearly defined.

How do I fix CVE-2006-0285?

To mitigate CVE-2006-0285, it is recommended to apply the latest patches provided by Oracle for affected versions.

Which versions are affected by CVE-2006-0285?

CVE-2006-0285 affects Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4, along with specific versions of Oracle Application Server.

Can CVE-2006-0285 be exploited remotely?

CVE-2006-0285 has unspecified attack vectors, so the potential for remote exploitation cannot be determined without further details.

Is CVE-2006-0285 still relevant?

While CVE-2006-0285 was reported in 2006, vulnerabilities in legacy software should always be assessed and mitigated accordingly in current environments.