CVE-2006-5367

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/22396
http://securitytracker.com/id?1017077
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
http://www.securityfocus.com/archive/1/449711/100/0/threaded
http://www.securityfocus.com/bid/20588	Patch
http://www.us-cert.gov/cas/techalerts/TA06-291A.html	US Government Resource
http://www.vupen.com/english/advisories/2006/4065

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:e-business_suite:11.5.7:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.8:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.9:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.10:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.10.1:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.10.2:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.6:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.7:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.8:::::::*

History

No history.

Information

Published : 2006-10-18 01:07

Updated : 2024-02-04 17:13

NVD link : CVE-2006-5367

Mitre link : CVE-2006-5367

CVE.ORG link : CVE-2006-5367

JSON object : View

Products Affected

oracle

e-business_suite

CWE

NVD-CWE-Other

{"id": "CVE-2006-5367", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-10-18T01:07:00.000", "references": [{"url": "http://secunia.com/advisories/22396", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017077", "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html", "source": "cve@mitre.org"}, {"url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20588", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4065", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.7 a 11.5.10CU2 tienen impacto vectores de ataque remotos autenticados desconocidos, tambi\u00e9n conocidas como Vuln# (1) APPS03 en Oracle Applications Framework, (2) APPS04 en Oracle Applications Technology Stack, (3) APPS05 en Oracle Balanced Scorecard, (4) APPS09 en Oracle Scripting, y (5) APPS10 en Oracle Trading Community."}], "lastModified": "2018-10-17T21:42:35.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D07FEA4F-B1C7-4250-81FD-AC1289769348"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78408427-3FFB-45C4-82EF-C8D636B3A718"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9B1BE09-4A96-41A3-AA1D-74533F396998"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80B61990-9CC2-4215-9879-AC817F4E6767"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC900808-1118-4FC0-9E48-380A02394F45"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD00F5CD-125C-4895-824E-23AC1D9A34BF"}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FE95D02-C2A8-4AAC-878B-DFA0FE13B571"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}