CVE-2006-5355: Critical severity Oracle Application Server vulnerability

Published Oct 18, 2006

Updated

Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# SSO01.

Affected Software

6 affected components

Oracle Application Server=9.0.4.3

Oracle Application Server=10.1.2.0.2

Oracle Application Server=10.1.2.1.0

Oracle Collaboration Suite=9.0.4.2

Oracle Collaboration Suite=10.1.2

Oracle E-Business Suite=11.5.10.2

Remediation

Patch Available

http://www.securityfocus.com/bid/20588

Event History

Oct 18, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5355?

CVE-2006-5355 has an unspecified severity, but has potential remote attack vectors.

How do I fix CVE-2006-5355?

To address CVE-2006-5355, apply the latest patches and updates from Oracle for the affected versions.

Which Oracle products are affected by CVE-2006-5355?

CVE-2006-5355 affects Oracle Application Server versions 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, Oracle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite version 11.5.10CU2.

Can CVE-2006-5355 be exploited remotely?

Yes, CVE-2006-5355 has unknown impact and remote attack vectors, indicating potential for remote exploitation.

Is there a workaround for CVE-2006-5355?

Currently, the best action for CVE-2006-5355 is to apply the relevant security patches provided by Oracle.