NVD

Id
14978  
Name
CVE-2010-3600  
Description
Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this issue involves an exposed JSP script that accepts XML uploads in conjunction with NULL bytes in an unspecified parameter that allow execution of arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-01-19  
Modified Date
2011-07-19  
Seq
2010-3600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
83292 14978 CVE-2010-3600 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
83293 14978 CVE-2010-3600 45883  View
83294 14978 CVE-2010-3600 1024972  View
83295 14978 CVE-2010-3600 ADV-2011-0139  View
83296 14978 CVE-2010-3600 ADV-2011-0140  View
83297 14978 CVE-2010-3600 http://www.zerodayinitiative.com/advisories/ZDI-11-018/  View
83298 14978 CVE-2010-3600 oracle-db-gridcontrol-unspecified(64755)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30800 JVNDB-2011-001039 複数の Oracle 製品の Client System Analyzer コンポーネントにおける脆弱性 複数の Oracle 製品の Client System Analyzer コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-3600 46180 CVE-2010-3600 14978 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001039.html 2011-01-18 2011-02-09 View