Test ID:	1.3.6.1.4.1.25623.1.0.811405
Category:	Denial of Service
Title:	Oracle OpenSSO 'Web Agents' DOS Vulnerability
Summary:	Oracle OpenSSO is prone to denial of service (DOS); vulnerability.
Description:	Summary: Oracle OpenSSO is prone to denial of service (DOS) vulnerability. Vulnerability Insight: The flaw exists due to an error in Network Security Services (NSS) before 3.23. Vulnerability Impact: Successful exploitation allows remote attackers to cause memory corruption and application crash, or possibly other unspecified impact via unknown vectors. Affected Software/OS: Oracle OpenSSO 3.0.0.8. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	BugTraq ID: 91072 Common Vulnerability Exposure (CVE) ID: CVE-2016-2834 http://www.securityfocus.com/bid/91072 Debian Security Information: DSA-3688 (Google Search) http://www.debian.org/security/2016/dsa-3688 RedHat Security Advisories: RHSA-2016:2779 http://rhn.redhat.com/errata/RHSA-2016-2779.html http://www.securitytracker.com/id/1036057 SuSE Security Announcement: SUSE-SU-2016:1691 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.html SuSE Security Announcement: openSUSE-SU-2016:1552 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.html SuSE Security Announcement: openSUSE-SU-2016:1557 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html http://www.ubuntu.com/usn/USN-2993-1 http://www.ubuntu.com/usn/USN-3029-1
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.