NVD

Id
60576  
Name
CVE-2006-1871  
Description
SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log Miner) package, aka Vuln# DB06.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-20  
Modified Date
2012-10-22  
Seq
2006-1871  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
312558 60576 CVE-2006-1871 20060418 SQL Injection in package SYS.DBMS_LOGMNR_SESSION  View
312559 60576 CVE-2006-1871 1015961  View
312560 60576 CVE-2006-1871 http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html  View
312561 60576 CVE-2006-1871 http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_logmnr_session.html  View
312562 60576 CVE-2006-1871 20060418 SQL Injection in package SYS.DBMS_LOGMNR_SESSION  View
312563 60576 CVE-2006-1871 SSRT061148  View
312564 60576 CVE-2006-1871 17590  View
312565 60576 CVE-2006-1871 ADV-2006-1397  View
312566 60576 CVE-2006-1871 ADV-2006-1571  View
312567 60576 CVE-2006-1871 oracle-dbmslogmnrsession-sql-injection(26047)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58021 JVNDB-2006-000217 Oracle Database の DELETE_FROM_TABLE 関数による SQL インジェクションの脆弱性 (DB06) Oracle Database には、DBMS_LOGMNR_SESSION パッケージの DELETE_FROM_TABLE 関数を介して任意の SQL コマンドを実行される脆弱性が存在します。 CVE-2006-1871 17973 CVE-2006-1871 60576 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000217.html 2006-04-18 2007-04-01 View