CVE

Id
21449  
CVE No.
CVE-2006-5345  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
204455 21449 CVE-2006-5345 BUGTRAQ:20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
204456 21449 CVE-2006-5345 URL:http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded  View
204457 21449 CVE-2006-5345 MISC:http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
204458 21449 CVE-2006-5345 MISC:http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
204459 21449 CVE-2006-5345 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
204460 21449 CVE-2006-5345 HP:HPSBMA02133  View
204461 21449 CVE-2006-5345 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204462 21449 CVE-2006-5345 HP:SSRT061201  View
204463 21449 CVE-2006-5345 URL:http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded  View
204464 21449 CVE-2006-5345 CERT:TA06-291A  View
204465 21449 CVE-2006-5345 URL:http://www.us-cert.gov/cas/techalerts/TA06-291A.html  View
204466 21449 CVE-2006-5345 BID:20588  View
204467 21449 CVE-2006-5345 URL:http://www.securityfocus.com/bid/20588  View
204468 21449 CVE-2006-5345 VUPEN:ADV-2006-4065  View
204469 21449 CVE-2006-5345 URL:http://www.vupen.com/english/advisories/2006/4065  View
204470 21449 CVE-2006-5345 SECTRACK:1017077  View
204471 21449 CVE-2006-5345 URL:http://securitytracker.com/id?1017077  View
204472 21449 CVE-2006-5345 SECUNIA:22396  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58534 JVNDB-2006-000730 Oracle 製品の Oracle HTTP Server コンポーネントにおける HTTPS と SSL に関する脆弱性 Oracle HTTP Server および Oracle Collaboration Suite に含まれる Oracle HTTP Server コンポーネントには、HTTPS と SSL に関連する脆弱性が存在します。(OHS04) CVE-2006-5347 21449 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000730.html  View