Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J03.
http://www.vupen.com/english/advisories/2006/4065
http://www.us-cert.gov/cas/techalerts/TA06-291A.html
http://www.securityfocus.com/bid/20588
http://www.securityfocus.com/archive/1/449711/100/0/threaded
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html