CVE

Id
21443  
CVE No.
CVE-2006-5339  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to "length checking" in the RELATE function before MD2.RELATE is called.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204333 21443 CVE-2006-5339 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204334 21443 CVE-2006-5339 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204335 21443 CVE-2006-5339 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204336 21443 CVE-2006-5339 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204337 21443 CVE-2006-5339 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204338 21443 CVE-2006-5339 HP:HPSBMA02133  View
204339 21443 CVE-2006-5339 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204340 21443 CVE-2006-5339 HP:SSRT061201  View
204341 21443 CVE-2006-5339 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204342 21443 CVE-2006-5339 CERT:TA06-291A  View
204343 21443 CVE-2006-5339 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204344 21443 CVE-2006-5339 BID:20588  View
204345 21443 CVE-2006-5339 URL:http://www.securityfocus.com/bid/20588  View
204346 21443 CVE-2006-5339 VUPEN:ADV-2006-4065  View
204347 21443 CVE-2006-5339 URL:http://www.vupen.com/english/advisories/2006/4065  View
204348 21443 CVE-2006-5339 SECTRACK:1017077  View
204349 21443 CVE-2006-5339 URL:http://securitytracker.com/id?1017077  View
204350 21443 CVE-2006-5339 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58505 JVNDB-2006-000701 Oracle Database の XMLDB コンポーネントに複数の SQL インジェクションの脆弱性 Oracle Database の XMLDB コンポーネントでは、PITRIG_DROP, PITRIG_DROPMETADATA, DISABLE_HIERARCHY_INTERNAL プロシージャにおいて SQL インジェクションの脆弱性が存在します。(DB14, DB15) CVE-2006-5341 21443 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000701.html  View