CVE-2006-5353: Critical severity Oracle Application Server vulnerability

Published Oct 18, 2006

Updated

Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Modrewrite Module, aka Vuln# OHS01.

Affected Software

5 affected components

Oracle Application Server=10.1.2.0.2

Oracle Application Server=9.0.4.3

Oracle Collaboration Suite=10.1.2.0

Oracle Application Server=10.1.2.0.1

Oracle Collaboration Suite=9.0.4.2

Remediation

Patch Available

http://www.securityfocus.com/bid/20588

Event History

Oct 18, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5353?

The severity of CVE-2006-5353 is currently unspecified but relates to a vulnerability in the Oracle HTTP Server.

How do I fix CVE-2006-5353?

To fix CVE-2006-5353, it is advised to apply the latest security patches or updates provided by Oracle for affected software versions.

What software versions are affected by CVE-2006-5353?

CVE-2006-5353 affects Oracle Application Server versions 9.0.4.3 and 10.1.2.* as well as Oracle Collaboration Suite versions 9.0.4.2 and 10.1.2.*.

Can CVE-2006-5353 be exploited remotely?

Yes, CVE-2006-5353 has remote attack vectors that could potentially be exploited by attackers.

What is the Mod_rewrite Module in the context of CVE-2006-5353?

The Mod_rewrite Module is a component of the Oracle HTTP Server that is associated with the vulnerability outlined in CVE-2006-5353.