CVE

Id
21446  
CVE No.
CVE-2006-5342  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_tune, aka Vuln# DB18. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18 might be related to SQL injection in the EXTENT_OF function.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204401 21446 CVE-2006-5342 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204402 21446 CVE-2006-5342 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204403 21446 CVE-2006-5342 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204404 21446 CVE-2006-5342 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204405 21446 CVE-2006-5342 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204406 21446 CVE-2006-5342 HP:HPSBMA02133  View
204407 21446 CVE-2006-5342 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204408 21446 CVE-2006-5342 HP:SSRT061201  View
204409 21446 CVE-2006-5342 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204410 21446 CVE-2006-5342 CERT:TA06-291A  View
204411 21446 CVE-2006-5342 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204412 21446 CVE-2006-5342 BID:20588  View
204413 21446 CVE-2006-5342 URL:http://www.securityfocus.com/bid/20588  View
204414 21446 CVE-2006-5342 VUPEN:ADV-2006-4065  View
204415 21446 CVE-2006-5342 URL:http://www.vupen.com/english/advisories/2006/4065  View
204416 21446 CVE-2006-5342 SECTRACK:1017077  View
204417 21446 CVE-2006-5342 URL:http://securitytracker.com/id?1017077  View
204418 21446 CVE-2006-5342 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58503 JVNDB-2006-000699 Oracle Database の Oracle Spatial コンポーネントにおける複数の脆弱性 Oracle Database の Oracle Spatial コンポーネントには、mdsys.sdo_3gl および mdsys.sdo_cs に関連する複数の脆弱性が存在します。(DB20,DB21) CVE-2006-5344 21446 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000699.html  View