cbcvebase.
CVE-2006-0287
published 2006-01-18

CVE-2006-0287: Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and…

PriorityP349critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
29.01%
97.9th percentile
Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.

Affected

2 ranges
VendorProductVersion rangeFixed in
oracleapplication_server——
oracledatabase_server——

Detection & IOCsextracted from sources · hover to see the quote

  • →Vulnerability is in the Oracle HTTP Server component; monitor for exploitation attempts targeting Oracle HTTP Server versions 10.1.0.5 (Database Server) and 10.1.2.0.2 (Application Server) ↗
  • →Related exploit targets Oracle XML DB functionality via local buffer overflow in 9i/10g; monitor for anomalous XML-related PL/SQL calls (e.g., DBMS_XMLSCHEMA or similar) with oversized parameters ↗
  • →Exploit code references reading from filesystem paths via XML/SQL (e.g., SYS.XMLTYPE or UTL_FILE constructs); monitor for SQL statements referencing local file paths such as 'c:\Unbreakable.txt' ↗
  • →Exploit uses DBMS_XMLSCHEMA with parameters TYPENAME, ELEMENTNAME, RECURSE, ANNOTATE, EMBEDCOLL; monitor for unusual invocations of DBMS_XMLSCHEMA with 'longstring' type names or empty ELEMENTNAME values ↗
  • ·CVE-2006-0287 has unspecified attack vectors and impact; Oracle has not publicly disclosed technical details, limiting precise detection rule creation ↗
  • ·The exploit-db entry (1455) targets Oracle XML local buffer overflow in 9i/10g and may not directly correspond to CVE-2006-0287 (OHS02); correlation between the two should be validated before deploying detections ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.