CVE-2005-3445

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-02 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.

Affected products

Oracle Application Server: 1.0.2.2, 9.0.2.3, 9.0.3.1, 9.0.4.1, 9.0.4.2, 10.1.2.0.0 (+2)
Oracle Database: 8.1.7.4, 9.2.0.5, 9.2.0.6, 9.2.0.7, 10.1.0.3, 10.1.0.4 (+1)

References

http://secunia.com/advisories/17250
http://www.kb.cert.org/vuls/id/210524
http://www.kb.cert.org/vuls/id/890940
http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
http://www.securityfocus.com/bid/15134
http://www.us-cert.gov/cas/techalerts/TA05-292A.html
http://secunia.com/advisories/17250
http://www.kb.cert.org/vuls/id/210524
http://www.kb.cert.org/vuls/id/890940
http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
http://www.securityfocus.com/bid/15134
http://www.us-cert.gov/cas/techalerts/TA05-292A.html

Get alerted when CVE-2005-3445 or the next vulnerability affects your stack