NVD

Id
59286  
Name
CVE-2006-0549  
Description
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260. However, there are some inconsistencies that make this unclear, and there is also a possibility that this is related to DB06, which is subsumed by CVE-2006-0259.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-03  
Modified Date
2008-09-05  
Seq
2006-0549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304758 59286 CVE-2006-0549 http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf  View
304759 59286 CVE-2006-0549 VU#629316  View
304760 59286 CVE-2006-0549 http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html  View
304761 59286 CVE-2006-0549 http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html  View
304762 59286 CVE-2006-0549 http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html  View
304763 59286 CVE-2006-0549 TA06-018A  View
304764 59286 CVE-2006-0549 oracle-january2006-update(24321)  View

Related JVN