{ "id": "CVE-2005-3445", "sourceIdentifier": "cve@mitre.org", "published": "2005-11-02T11:03:00.000", "lastModified": "2012-10-23T01:51:25.367", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 10.0 }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "87DEB7BD-FB71-4C22-A0FF-89923B263DC2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "852BF209-3C6F-403B-920D-50C46D37515B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "4FFBB096-523E-4634-ADC4-6CFB03F9577B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "D809B0B7-70EF-47C5-B91F-923E999CA7FB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:10.1.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "2328BA88-C390-46EA-8C30-9F0A001C10EB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:10.1.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FB8F5AAE-0365-4E01-AB04-CDC6D58B00B6" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F0B4BAA9-D045-4D2B-8220-47F47ED936DF" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "B559C62F-88A7-42D3-9629-9F5CAD43F8B6" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:9.2.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "07F11F24-415A-4E36-9D03-5B7594356183" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "F7847CEB-DD8D-45A0-B500-95D511110FB3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:10.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "C4019F72-9031-4CA6-B39A-AFC203D9D464" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:10.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "F21B42DF-71DC-4FC4-8050-CFF7A3B641E5" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:10.1.0.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "B945FDC6-7884-467A-AA4E-F3AB0EE32E6E" } ] } ] } ], "references": [ { "url": "http://www.kb.cert.org/vuls/id/210524", "source": "cve@mitre.org", "tags": [ "US Government Resource" ] }, { "url": "http://www.kb.cert.org/vuls/id/890940", "source": "cve@mitre.org", "tags": [ "US Government Resource" ] }, { "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/15134", "source": "cve@mitre.org" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA05-292A.html", "source": "cve@mitre.org", "tags": [ "US Government Resource" ] } ] }