NVD

Id
62373  
Name
CVE-2006-3705  
Description
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-07-21  
Modified Date
2012-10-22  
Seq
2006-3705  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
323353 62373 CVE-2006-3705 20060718 Oracle Database - SQL Injection in SYS.DBMS_UPGRADE [DB22]  View
323354 62373 CVE-2006-3705 20060718 Oracle Database - SQL Injection in SYS.DBMS_STATS [DB21]  View
323355 62373 CVE-2006-3705 1251  View
323356 62373 CVE-2006-3705 1016529  View
323357 62373 CVE-2006-3705 http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.html  View
323358 62373 CVE-2006-3705 http://www.red-database-security.com/advisory/oracle_cpu_july_2006.html  View
323359 62373 CVE-2006-3705 http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_stats.html  View
323360 62373 CVE-2006-3705 http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_upgrade.html  View
323361 62373 CVE-2006-3705 20060718 Oracle Database - SQL Injection in SYS.DBMS_UPGRADE [DB22]  View
323362 62373 CVE-2006-3705 20060718 Oracle Database - SQL Injection in SYS.DBMS_STATS [DB21]  View
323363 62373 CVE-2006-3705 HPSBMA02133  View
323364 62373 CVE-2006-3705 19054  View
323365 62373 CVE-2006-3705 TA06-200A  View
323366 62373 CVE-2006-3705 ADV-2006-2863  View
323367 62373 CVE-2006-3705 ADV-2006-2947  View
323368 62373 CVE-2006-3705 oracle-dbmsupgrade-sql-injection(27886)  View
323369 62373 CVE-2006-3705 oracle-dbmsstats-sql-injection(27887)  View
323370 62373 CVE-2006-3705 oracle-cpu-july-2006(27897)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58225 JVNDB-2006-000421 Oracle Database における SQL インジェクションの脆弱性 (DB21,DB22) Oracle Database には、Statistics (DB21)、Upgrade (DB22) に関連する脆弱性が存在します。 CVE-2006-3705 19807 CVE-2006-3705 62373 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000421.html 2006-07-18 2007-04-01 View