CVE-2007-0280

published 2007-01-17

CVE-2007-0280: Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OPMN01 is for a buffer overflow in Oracle Notification Service (ONS).

Affected

7 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	collaboration_suite	—	—
oracle	collaboration_suite	—	—
oracle	enterprise_grid_console_server	—	—
oracle	http_server	—	—

CWE-134