CVE-2006-0265
published 2006-01-18CVE-2006-0265: Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as…
PriorityP337critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.27%
92.5th percentile
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEAN_DML function in CTXSYS.DRIDML; (c) GET_ROWID function in CTXSYS.CTX_DOC; (d) BROWSE_WORDS function in CTXSYS.CTX_QUERY; and (e) ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE functions in CATINDEXMETHODS.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6cwf-mhf4-8884: Multiple unspecified vulnerabilities in Oracle Database server 8
ghsa_unreviewed·2022-05-01
CVE-2006-0265 [HIGH] GHSA-6cwf-mhf4-8884: Multiple unspecified vulnerabilities in Oracle Database server 8
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEAN_DML function in CTXSYS.DRIDML; (c) GET_ROWID function in CTXSYS.CTX_DOC; (d) BROWSE_WORDS function in CTXSYS.CTX_QUERY; and (e) ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE functions in CATINDEXMETHODS.
GHSA
GHSA-559x-r5hp-v76r: Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit l
ghsa_unreviewed·2022-05-01·CVSS 10.0
CVE-2006-0547 [CRITICAL] GHSA-559x-r5hp-v76r: Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit l
Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB18 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0265.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
OWASP
Oracle
owasp
CVE-2006-0265 Oracle
# Oracle
## Summary
Web-based PL/SQL applications are enabled by the PL/SQL Gateway, which translates web requests into database queries. Many deployments expose this through [Oracle REST Data Services (ORDS)](https://docs.oracle.com/en/database/oracle/oracle-rest-data-services/26.1/orddg/introduction-to-Oracle-REST-Data-Services.html), often fronting [Oracle APEX](https://docs.oracle.com/en/database/oracle/apex/). Older estates may still use Apache `mod_plsql`, Oracle HTTP Server, Oracle Application Server, Portal, HTML DB / APEX predecessors, WebDB, or the XML Database (XDB) web server.
This chapter focuses on recognizing and testing PL/SQL Gateway endpoints, including legacy `mod_plsql` and Application Server deployments that remain in production. Apply the same input-validation mind
OWASP
Testing for Oracle
owasp
CVE-2006-0265 Testing for Oracle
# Testing for Oracle
## Summary
Web-based PL/SQL applications are enabled by the PL/SQL Gateway, which translates web requests into database queries. Many deployments expose this through [Oracle REST Data Services (ORDS)](https://docs.oracle.com/en/database/oracle/oracle-rest-data-services/26.1/orddg/introduction-to-Oracle-REST-Data-Services.html), often fronting [Oracle APEX](https://docs.oracle.com/en/database/oracle/apex/). Older estates may still use Apache `mod_plsql`, Oracle HTTP Server, Oracle Application Server, Portal, HTML DB / APEX predecessors, WebDB, or the XML Database (XDB) web server.
This chapter focuses on recognizing and testing PL/SQL Gateway endpoints, including legacy `mod_plsql` and Application Server deployments that remain in production. Apply the same input-val
OWASP
Testing for Oracle
owasp
Testing for Oracle
# Testing for Oracle
## Summary
Web based PL/SQL applications are enabled by the PL/SQL Gateway, which is is the component that translates web requests into database queries. Oracle has developed a number of software implementations, ranging from the early web listener product to the Apache `mod_plsql` module to the XML Database (XDB) web server. All have their own quirks and issues, each of which will be thoroughly investigated in this chapter. Products that use the PL/SQL Gateway include, but are not limited to, the Oracle HTTP Server, eBusiness Suite, Portal, HTMLDB, WebDB and Oracle Application Server.
## How to Test
### How the PL/SQL Gateway Works
Essentially the PL/SQL Gateway simply acts as a proxy server taking the user's web request and passes it on to the database server wh
http://secunia.com/advisories/18493http://secunia.com/advisories/18608http://securitytracker.com/id?1015499http://www.kb.cert.org/vuls/id/545804http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.htmlhttp://www.osvdb.org/22555http://www.osvdb.org/22639http://www.osvdb.org/22640http://www.osvdb.org/22641http://www.osvdb.org/22642http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.htmlhttp://www.securityfocus.com/bid/16287http://www.vupen.com/english/advisories/2006/0243http://www.vupen.com/english/advisories/2006/0323https://exchange.xforce.ibmcloud.com/vulnerabilities/24321http://secunia.com/advisories/18493http://secunia.com/advisories/18608http://securitytracker.com/id?1015499http://www.kb.cert.org/vuls/id/545804http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.htmlhttp://www.osvdb.org/22555http://www.osvdb.org/22639http://www.osvdb.org/22640http://www.osvdb.org/22641http://www.osvdb.org/22642http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.htmlhttp://www.securityfocus.com/bid/16287http://www.vupen.com/english/advisories/2006/0243http://www.vupen.com/english/advisories/2006/0323https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
2006-01-18
Published