CVE-2006-5359 - Vulnerability Details - OpenCVE

Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Oracle	Application Server E-business Suite

Configuration 1 [-]

OR	cpe:2.3:a:oracle:application_server:9.0.4.3:::::::*
	cpe:2.3:a:oracle:application_server:10.1.2.0.2:::::::*
	cpe:2.3:a:oracle:e-business_suite:11.5.10.2:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/22396
http://securitytracker.com/id?1017077
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
http://www.red-database-security.com/advisory/oracle_reports_css.html
http://www.securityfocus.com/archive/1/449503/100/0/threaded
http://www.securityfocus.com/archive/1/449711/100/0/threaded
http://www.securityfocus.com/bid/20588
http://www.us-cert.gov/cas/techalerts/TA06-291A.html
http://www.vupen.com/english/advisories/2006/4065

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-10-18T01:00:00

Updated: 2024-08-07T19:48:30.214Z

Reserved: 2006-10-17T00:00:00

Link: CVE-2006-5359

Vulnrichment

No data.

NVD

Status : Modified

Published: 2006-10-18T01:07:00.000

Modified: 2024-11-21T00:18:54.717

Link: CVE-2006-5359

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-10-17T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html"}, {"name": "20588", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/20588"}, {"tags": ["x_refsource_MISC"], "url": "http://www.red-database-security.com/advisory/oracle_reports_css.html"}, {"name": "HPSBMA02133", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html"}, {"name": "20061023 Various Cross-Site-Scripting Vulnerabilities in Oracle Reports", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/449503/100/0/threaded"}, {"name": "SSRT061201", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"name": "ADV-2006-4065", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4065"}, {"name": "22396", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22396"}, {"name": "1017077", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017077"}, {"name": "TA06-291A", "tags": ["third-party-advisory", "x_refsource_CERT"], "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-5359", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html", "refsource": "MISC", "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html"}, {"name": "20588", "refsource": "BID", "url": "http://www.securityfocus.com/bid/20588"}, {"name": "http://www.red-database-security.com/advisory/oracle_reports_css.html", "refsource": "MISC", "url": "http://www.red-database-security.com/advisory/oracle_reports_css.html"}, {"name": "HPSBMA02133", "refsource": "HP", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"name": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html"}, {"name": "20061023 Various Cross-Site-Scripting Vulnerabilities in Oracle Reports", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/449503/100/0/threaded"}, {"name": "SSRT061201", "refsource": "HP", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"name": "ADV-2006-4065", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4065"}, {"name": "22396", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22396"}, {"name": "1017077", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017077"}, {"name": "TA06-291A", "refsource": "CERT", "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:48:30.214Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html"}, {"name": "20588", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/20588"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.red-database-security.com/advisory/oracle_reports_css.html"}, {"name": "HPSBMA02133", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html"}, {"name": "20061023 Various Cross-Site-Scripting Vulnerabilities in Oracle Reports", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/449503/100/0/threaded"}, {"name": "SSRT061201", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"name": "ADV-2006-4065", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4065"}, {"name": "22396", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22396"}, {"name": "1017077", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017077"}, {"name": "TA06-291A", "tags": ["third-party-advisory", "x_refsource_CERT", "x_transferred"], "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-5359", "datePublished": "2006-10-18T01:00:00", "dateReserved": "2006-10-17T00:00:00", "dateUpdated": "2024-08-07T19:48:30.214Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "9CA9867F-D7BC-4230-9584-C2FBB6642482", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F0B4BAA9-D045-4D2B-8220-47F47ED936DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*", "matchCriteriaId": "80B61990-9CC2-4215-9879-AC817F4E6767", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en el componente Oracle Reports Developer en Oracle Application Server 9.0.4.3 y 10.1.2.0.2, y Oracle E-Business Suite y Applications 11.5.10CU2, tienen impacto y vectores de ataque remotos desconocidos, tambi\u00e9n conocido como Vuln# (1) REP01 y (2) REP02. NOTA: a fecha de 27/10/2006, Oracle no ha negado los informes de un investigador fiable de que estos problemas est\u00e1n relacionacos con (a) showenv y (b) parsequery en el caso de REP01, y (c) cellwrappper y (d) delimiter para REP02."}], "id": "CVE-2006-5359", "lastModified": "2024-11-21T00:18:54.717", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-10-18T01:07:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22396"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017077"}, {"source": "cve@mitre.org", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html"}, {"source": "cve@mitre.org", "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html"}, {"source": "cve@mitre.org", "url": "http://www.red-database-security.com/advisory/oracle_reports_css.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/449503/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/20588"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/4065"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22396"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1017077"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.red-database-security.com/advisory/oracle_reports_css.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/449503/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/20588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/4065"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}