NVD

Id
59173  
Name
CVE-2006-0435  
Description
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-26  
Modified Date
2012-10-22  
Seq
2006-0435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304143 59173 CVE-2006-0435 20060202 The History of the Oracle PLSQL Gateway Flaw  View
304144 59173 CVE-2006-0435 20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw  View
304145 59173 CVE-2006-0435 20060125 Workaround for unpatched Oracle PLSQL Gateway flaw  View
304146 59173 CVE-2006-0435 402  View
304147 59173 CVE-2006-0435 403  View
304148 59173 CVE-2006-0435 1015544  View
304149 59173 CVE-2006-0435 1015961  View
304150 59173 CVE-2006-0435 VU#169164  View
304151 59173 CVE-2006-0435 http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html  View
304152 59173 CVE-2006-0435 http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html  View
304153 59173 CVE-2006-0435 20060125 Workaround for unpatched Oracle PLSQL Gateway flaw  View
304154 59173 CVE-2006-0435 20060131 Re: Workaround for unpatched Oracle PLSQL Gateway flaw  View
304155 59173 CVE-2006-0435 20060202 The History of the Oracle PLSQL Gateway Flaw  View
304156 59173 CVE-2006-0435 20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw  View
304157 59173 CVE-2006-0435 20060208 Re: Workaround for unpatched Oracle PLSQL Gateway flaw  View
304158 59173 CVE-2006-0435 SSRT061148  View
304159 59173 CVE-2006-0435 16384  View
304160 59173 CVE-2006-0435 ADV-2006-0338  View
304161 59173 CVE-2006-0435 ADV-2006-1397  View
304162 59173 CVE-2006-0435 ADV-2006-1571  View
304163 59173 CVE-2006-0435 oracle-plsql-command-execution(24363)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57874 JVNDB-2006-000070 Oracle PL/SQL におけるアクセス制限回避の脆弱性 (PLSQL01) Oracle 製品の mod_plsql (ModPL/SQL for Apache) には、特定の文字を含むパッケージ名がリクエストされた場合に、排除リストとのマッチングによるブロックが回避され、本来アクセスが許可されていないパッケージやプロシージャにアクセスされてしまう脆弱性 (PLSQL01) が存在します。 CVE-2006-0435 16537 CVE-2006-0435 59173 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000070.html 2006-01-25 2007-04-01 View