CVE

Id
21438  
CVE No.
CVE-2006-5334  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204232 21438 CVE-2006-5334 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204233 21438 CVE-2006-5334 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204234 21438 CVE-2006-5334 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204235 21438 CVE-2006-5334 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204236 21438 CVE-2006-5334 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204237 21438 CVE-2006-5334 HP:HPSBMA02133  View
204238 21438 CVE-2006-5334 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204239 21438 CVE-2006-5334 HP:SSRT061201  View
204240 21438 CVE-2006-5334 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204241 21438 CVE-2006-5334 CERT:TA06-291A  View
204242 21438 CVE-2006-5334 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204243 21438 CVE-2006-5334 BID:20588  View
204244 21438 CVE-2006-5334 URL:http://www.securityfocus.com/bid/20588  View
204245 21438 CVE-2006-5334 VUPEN:ADV-2006-4065  View
204246 21438 CVE-2006-5334 URL:http://www.vupen.com/english/advisories/2006/4065  View
204247 21438 CVE-2006-5334 SECTRACK:1017077  View
204248 21438 CVE-2006-5334 URL:http://securitytracker.com/id?1017077  View
204249 21438 CVE-2006-5334 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58510 JVNDB-2006-000706 Oracle Database の CDC コンポーネントにおける複数の SQL インジェクションの脆弱性 Oracle Database の Change Data Capture (CDC) コンポーネントには、CREATE_CHANGE_TABLE, CHANGE_TABLE_TRIGGER, PREPARE_UNBOUNDED_VIEW に関連する複数の脆弱性が存在します。(DB05,DB06) CVE-2006-5336 21438 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000706.html  View