CVE

Id
21437  
CVE No.
CVE-2006-5333  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204214 21437 CVE-2006-5333 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204215 21437 CVE-2006-5333 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204216 21437 CVE-2006-5333 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204217 21437 CVE-2006-5333 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204218 21437 CVE-2006-5333 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204219 21437 CVE-2006-5333 HP:HPSBMA02133  View
204220 21437 CVE-2006-5333 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204221 21437 CVE-2006-5333 HP:SSRT061201  View
204222 21437 CVE-2006-5333 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204223 21437 CVE-2006-5333 CERT:TA06-291A  View
204224 21437 CVE-2006-5333 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204225 21437 CVE-2006-5333 BID:20588  View
204226 21437 CVE-2006-5333 URL:http://www.securityfocus.com/bid/20588  View
204227 21437 CVE-2006-5333 VUPEN:ADV-2006-4065  View
204228 21437 CVE-2006-5333 URL:http://www.vupen.com/english/advisories/2006/4065  View
204229 21437 CVE-2006-5333 SECTRACK:1017077  View
204230 21437 CVE-2006-5333 URL:http://securitytracker.com/id?1017077  View
204231 21437 CVE-2006-5333 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58519 JVNDB-2006-000715 Oracle Database の複数コンポーネントにおける SQL インジェクションの脆弱性 Oracle Database には、Change Data Capture (CDC) コンポーネントおよび Oracle Spatial コンポーネントに関連する複数の脆弱性が存在します。(DB04,DB07,DB08,DB12,DB16) CVE-2006-5335 21437 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000715.html  View