CVE-2006-5354: Critical severity Oracle Application Server vulnerability

Published Oct 18, 2006

Updated

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06.

Affected Software

8 affected components

Oracle Application Server=10.1.2.0.2

Oracle Application Server=10.1.2.1.0

Oracle E-Business Suite=11.5.10.2

Oracle Application Server=9.0.4.3

Oracle HTTP Server=10.1.0.5

Oracle Collaboration Suite=9.0.4.2

Oracle Collaboration Suite=10.1.2

Oracle HTTP Server=9.2.0.7

Remediation

Patch Available

http://www.securityfocus.com/bid/20588

Event History

Oct 18, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5354?

The severity of CVE-2006-5354 is currently unknown due to the unspecified nature of the vulnerability.

How do I fix CVE-2006-5354?

To fix CVE-2006-5354, ensure that you are using the latest patched version of the affected Oracle products.

Which Oracle products are affected by CVE-2006-5354?

CVE-2006-5354 affects Oracle HTTP Server versions 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3 and 10.1.2.x, Collaboration Suite 9.0.4.2 and 10.1.2, and E-Business Suite 11.5.10.2.

Can CVE-2006-5354 be exploited remotely?

Yes, CVE-2006-5354 has remote attack vectors which may allow exploitation.

What is the impact of CVE-2006-5354?

The impact of CVE-2006-5354 is currently unknown due to the lack of specific details regarding the vulnerability.