NVD

Id
60786  
Name
CVE-2006-2081  
Description
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the DBMS_EXPORT_EXTENSION package. NOTE: this issue was originally linked to DB05 (CVE-2006-1870), but a reliable third party has claimed that it is not the same issue. Based on details of the problem, the primary issue appears to be insecure privileges that facilitate the introduction of SQL in a way that is not releated to special characters, so this is not "SQL injection" per se.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-27  
Modified Date
2008-09-05  
Seq
2006-2081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313891 60786 CVE-2006-2081 802  View
313892 60786 CVE-2006-2081 1015999  View
313893 60786 CVE-2006-2081 VU#932124  View
313894 60786 CVE-2006-2081 http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html  View
313895 60786 CVE-2006-2081 20060419 Oracle 10g 10.2.0.2.0 DBA exploit  View
313896 60786 CVE-2006-2081 20060426 Recent Oracle exploit is _actually_ an 0day with no patch  View
313897 60786 CVE-2006-2081 20060427 Re: Recent Oracle exploit is _actually_ an 0day with no patch  View
313898 60786 CVE-2006-2081 20060427 Re: Recent Oracle exploit is _actually_ an 0day with no patch  View
313899 60786 CVE-2006-2081 20060501 RE: Oracle 10g 10.2.0.2.0 DBA exploit  View
313900 60786 CVE-2006-2081 17699  View
313901 60786 CVE-2006-2081 oracle-dbmsexportextension-sql-injection(26048)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58215 JVNDB-2006-000411 Oracle Database の DBMS_EXPORT_EXTENSION パッケージにおける SQL インジェクションの脆弱性 Oracle Database には、DBMS_EXPORT_EXTENSION パッケージの GET_DOMAIN_INDEX_METADATA 関数の呼び出しにより、任意の SQL クエリを実行される脆弱性が存在します。 CVE-2006-2081 18183 CVE-2006-2081 60786 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000411.html 2006-07-18 2007-04-01 View