CVE-2006-3710: Critical severity Oracle Application Server vulnerability

Published Jul 19, 2006

Updated

Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2) AS08.

Affected Software

4 affected components

Oracle Application Server=9.0.2.3

Oracle Application Server=9.0.3.1

Oracle Application Server=9.0.4.2

Oracle Application Server=10.1.2.0.0

Remediation

Patch Available

http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html

Event History

Jul 19, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3710?

The severity of CVE-2006-3710 is currently unspecified, as it has unknown impacts and attack vectors.

How do I fix CVE-2006-3710?

To mitigate CVE-2006-3710, it is recommended to update your OC4J installation to a version that addresses this vulnerability.

What versions of Oracle Application Server are affected by CVE-2006-3710?

CVE-2006-3710 affects Oracle Application Server versions 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0.

What is OC4J in relation to CVE-2006-3710?

OC4J stands for Oracle Container for Java and is the component of Oracle Application Server that is affected by CVE-2006-3710.

Are there any known attack vectors for CVE-2006-3710?

CVE-2006-3710 has unknown attack vectors, which indicates that the ways to exploit it have not been fully documented.