Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02.
http://www.vupen.com/english/advisories/2006/4065
http://www.us-cert.gov/cas/techalerts/TA06-291A.html
http://www.securityfocus.com/bid/20588
http://www.securityfocus.com/archive/1/449711/100/0/threaded
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html