CVE

Id
21436  
CVE No.
CVE-2006-5332  
Status
Candidate  
Description
Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote authenticated attack vectors, aka Vuln# DB01. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB01 is for PL/SQL injection in the ENABLE_HIERARCHY_INTERNAL procedure.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204191 21436 CVE-2006-5332 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204192 21436 CVE-2006-5332 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204193 21436 CVE-2006-5332 BUGTRAQ:20061023 SQL Injection in package XDB.DBMS_XDBZ0  View
204194 21436 CVE-2006-5332 URL:http://www.securityfocus.com/archive/1/archive/1/449510/100/0/threaded  View
204195 21436 CVE-2006-5332 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204196 21436 CVE-2006-5332 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204197 21436 CVE-2006-5332 MISC:http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_xdbz0.html  View
204198 21436 CVE-2006-5332 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204199 21436 CVE-2006-5332 HP:HPSBMA02133  View
204200 21436 CVE-2006-5332 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204201 21436 CVE-2006-5332 HP:SSRT061201  View
204202 21436 CVE-2006-5332 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204203 21436 CVE-2006-5332 CERT:TA06-291A  View
204204 21436 CVE-2006-5332 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204205 21436 CVE-2006-5332 CERT-VN:VU#717140  View
204206 21436 CVE-2006-5332 URL:http://www.kb.cert.org/vuls/id/717140  View
204207 21436 CVE-2006-5332 BID:20588  View
204208 21436 CVE-2006-5332 URL:http://www.securityfocus.com/bid/20588  View
204209 21436 CVE-2006-5332 VUPEN:ADV-2006-4065  View
204210 21436 CVE-2006-5332 URL:http://www.vupen.com/english/advisories/2006/4065  View
204211 21436 CVE-2006-5332 SECTRACK:1017077  View
204212 21436 CVE-2006-5332 URL:http://securitytracker.com/id?1017077  View
204213 21436 CVE-2006-5332 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58516 JVNDB-2006-000712 Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 Oracle Database の Oracle Spatial コンポーネントには、mdsys.md2 に関連する脆弱性が存在します。(DB03) CVE-2006-5334 21436 7.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000712.html  View