NVD

Id
63936  
Name
CVE-2006-5335  
Description
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) Vuln# DB04 and sys.dbms_cdc_impdp in the (a) Change Data Capture (CDC) component; (2) Vuln# DB07, (3) DB08, and (4) DB16 in sys.dbms_cdc_isubscribe in CDC; and (5) mdsys.sdo_geor_int in the (b) Oracle Spatial component, aka DB12. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that these issues are related to SQL injection in the BUMP_SEQUENCE function (DB04), CREATE_SUBSCRIPTION (DB07), EXTEND_WINDOW_LIST (DB08), SUBSCRIBE (DB16), and COMPRESSDATA (DB12).  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-17  
Modified Date
2012-10-22  
Seq
2006-5335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333286 63936 CVE-2006-5335 1017077  View
333287 63936 CVE-2006-5335 http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf  View
333288 63936 CVE-2006-5335 VU#736324  View
333289 63936 CVE-2006-5335 http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html  View
333290 63936 CVE-2006-5335 http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html  View
333291 63936 CVE-2006-5335 20061018 Analysis of the Oracle October 2006 Critical Patch Update  View
333292 63936 CVE-2006-5335 20061023 SQL Injection in package SYS.DBMS_CDC_IMPDP  View
333293 63936 CVE-2006-5335 SSRT061201  View
333294 63936 CVE-2006-5335 20588  View
333295 63936 CVE-2006-5335 TA06-291A  View
333296 63936 CVE-2006-5335 ADV-2006-4065  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58519 JVNDB-2006-000715 Oracle Database の複数コンポーネントにおける SQL インジェクションの脆弱性 Oracle Database には、Change Data Capture (CDC) コンポーネントおよび Oracle Spatial コンポーネントに関連する複数の脆弱性が存在します。(DB04,DB07,DB08,DB12,DB16) CVE-2006-5335 21437 CVE-2006-5335 63936 9 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000715.html 2006-10-17 2007-04-01 View