Lucene search

[email protected]CVE-2007-5520

HistoryOct 17, 2007 - 11:17 p.m.

CVE-2007-5520

2007-10-1723:17:00

[email protected]

web.nvd.nist.gov

cve-2007-5520

oracle

internet directory

database

application server

vulnerability

remote attack

as05

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unknown impact and remote attack vectors, aka AS05.

Affected configurations

NVD

Node

oracleapplication_serverMatch10.1.2.0.1

oracleapplication_serverMatch10.1.2.0.2

oracleapplication_serverMatch10.1.2.2

oracleapplication_serverMatch10.1.3.0

oracleapplication_serverMatch10.1.3.1

oracleapplication_serverMatch10.1.3.2.0

oracleapplication_serverMatch10.1.3.3

oracledatabase_serverMatch9.2.0.8

oracledatabase_serverMatch9.2.0.8dv

CPENameOperatorVersion
oracle:application_serveroracle application servereq10.1.2.0.1
oracle:application_serveroracle application servereq10.1.2.0.2
oracle:application_serveroracle application servereq10.1.2.2
oracle:application_serveroracle application servereq10.1.3.0
oracle:application_serveroracle application servereq10.1.3.1
oracle:application_serveroracle application servereq10.1.3.2.0
oracle:application_serveroracle application servereq10.1.3.3
oracle:database_serveroracle database servereq9.2.0.8
oracle:database_serveroracle database servereq9.2.0.8dv

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	10.1.2.0.1
oracle:application_server	oracle application server	eq	10.1.2.0.2
oracle:application_server	oracle application server	eq	10.1.2.2
oracle:application_server	oracle application server	eq	10.1.3.0
oracle:application_server	oracle application server	eq	10.1.3.1
oracle:application_server	oracle application server	eq	10.1.3.2.0
oracle:application_server	oracle application server	eq	10.1.3.3
oracle:database_server	oracle database server	eq	9.2.0.8
oracle:database_server	oracle database server	eq	9.2.0.8dv

References

marc.info/?l=bugtraq&m=119332677525918&w=2

secunia.com/advisories/27251

secunia.com/advisories/27409

www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html

www.securitytracker.com/id?1018823

www.us-cert.gov/cas/techalerts/TA07-290A.html

www.vupen.com/english/advisories/2007/3524

www.vupen.com/english/advisories/2007/3626

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

Related for CVE-2007-5520

prion1 nvd1 cvelist1 nessus2