NVD

Id
62366  
Name
CVE-2006-3698  
Description
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Capture (CDC) component and (2) DB03 for Data Pump Metadata API. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB01 is related to multiple SQL injection vulnerabilities in SYS.DBMS_CDC_IMPDP using the (a) IMPORT_CHANGE_SET, (b) IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBED_COLUMN, (g) VALIDATE_IMPORT, (h) VALIDATE_CHANGE_SET, (i) VALIDATE_CHANGE_TABLE, and (j) VALIDATE_SUBSCRIPTION procedures, and that DB03 is for SQL injection in the MAIN procedure for SYS.KUPW$WORKER.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-07-21  
Modified Date
2012-10-22  
Seq
2006-3698  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
323281 62366 CVE-2006-3698 20060718 Oracle Database - SQL Injection in SYS.KUPW$WORKER [DB03]  View
323282 62366 CVE-2006-3698 1016529  View
323283 62366 CVE-2006-3698 http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html  View
323284 62366 CVE-2006-3698 http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html  View
323285 62366 CVE-2006-3698 http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_cdc_impdp.html  View
323286 62366 CVE-2006-3698 http://www.red-database-security.com/advisory/oracle_sql_injection_kupw$worker.html  View
323287 62366 CVE-2006-3698 20060718 Oracle Database - SQL Injection in SYS.KUPW$WORKER [DB03]  View
323288 62366 CVE-2006-3698 20060718 Oracle Database - SQL Injection in SYS.DBMS_CDC_IMPDP [DB01]  View
323289 62366 CVE-2006-3698 SSRT061201  View
323290 62366 CVE-2006-3698 19054  View
323291 62366 CVE-2006-3698 TA06-200A  View
323292 62366 CVE-2006-3698 ADV-2006-2863  View
323293 62366 CVE-2006-3698 ADV-2006-2947  View
323294 62366 CVE-2006-3698 oracle-kupwworker-sql-injection(27888)  View
323295 62366 CVE-2006-3698 oracle-dbmscdcimpdp-sql-injection(27889)  View
323296 62366 CVE-2006-3698 oracle-cpu-july-2006(27897)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58218 JVNDB-2006-000414 Oracle Database における複数の SQL インジェクションの脆弱性 (DB01,DB03) Oracle Database には、Change Data Capture (CDC) コンポーネント (DB01) および Data Pump Metadata API (DB03) に関連する脆弱性が存在します。 CVE-2006-3698 19800 CVE-2006-3698 62366 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000414.html 2006-07-18 2007-04-01 View