CVE

Id
16361  
CVE No.
CVE-2006-0257  
Status
Candidate  
Description
Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package.  
Phase
Assigned (20060118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
130281 16361 CVE-2006-0257 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
130282 16361 CVE-2006-0257 CERT-VN:VU#545804  View
130283 16361 CVE-2006-0257 URL:http://www.kb.cert.org/vuls/id/545804  View
130284 16361 CVE-2006-0257 BID:16287  View
130285 16361 CVE-2006-0257 URL:http://www.securityfocus.com/bid/16287  View
130286 16361 CVE-2006-0257 VUPEN:ADV-2006-0243  View
130287 16361 CVE-2006-0257 URL:http://www.vupen.com/english/advisories/2006/0243  View
130288 16361 CVE-2006-0257 VUPEN:ADV-2006-0323  View
130289 16361 CVE-2006-0257 URL:http://www.vupen.com/english/advisories/2006/0323  View
130290 16361 CVE-2006-0257 OSVDB:22540  View
130291 16361 CVE-2006-0257 URL:http://www.osvdb.org/22540  View
130292 16361 CVE-2006-0257 SECTRACK:1015499  View
130293 16361 CVE-2006-0257 URL:http://securitytracker.com/id?1015499  View
130294 16361 CVE-2006-0257 SECUNIA:18493  View
130295 16361 CVE-2006-0257 URL:http://secunia.com/advisories/18493  View
130296 16361 CVE-2006-0257 SECUNIA:18608  View
130297 16361 CVE-2006-0257 URL:http://secunia.com/advisories/18608  View
130298 16361 CVE-2006-0257 XF:oracle-january2006-update(24321)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57834 JVNDB-2006-000030 Oracle Database における脆弱性 (DB04, DB06, DB10, DB16, DB17) ------------ CVE-2006-0259 16361 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000030.html  View