NVD

Id
58999  
Name
CVE-2006-0259  
Description
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB06 is SQL injection in the GENERATE_JOB_NAME, GET_WORKERSTATUSLIST1010, GET_PARAMVALUES1010, GET_DUMPFILESET1010, GET_JOBSTATUS1010, ATTACH, and ESTABLISH_REMOTE_CONTEXT functions in DBMS_DATAPUMP.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-01-18  
Modified Date
2012-10-22  
Seq
2006-0259  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303008 58999 CVE-2006-0259 1015499  View
303009 58999 CVE-2006-0259 VU#545804  View
303010 58999 CVE-2006-0259 http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
303011 58999 CVE-2006-0259 16287  View
303012 58999 CVE-2006-0259 ADV-2006-0243  View
303013 58999 CVE-2006-0259 ADV-2006-0323  View
303014 58999 CVE-2006-0259 oracle-january2006-update(24321)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57834 JVNDB-2006-000030 Oracle Database における脆弱性 (DB04, DB06, DB10, DB16, DB17) ------------ CVE-2006-0259 16361 CVE-2006-0259 58999 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000030.html 2006-01-17 2007-04-01 View