CVE-2006-3702
published 2006-07-21CVE-2006-3702: Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle…
critical10CVSS 3.1
AVNACLAuNCCICAC
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 for OCI; (10) DB16 for Query Rewrite/Summary Mgmt; (11) DB17, (12) DB18, (13) DB19, (14) DBC02, (15) DBC03, and (16) DBC04 for RPC; and (17) DB20 for Semantic Analysis. NOTE: as of 20060719, Oracle has not disputed third party claims that DB06 is related to "SQL injection" using DBMS_EXPORT_EXTENSION with a modified ODCIIndexGetMetadata routine and a call to GET_DOMAIN_INDEX_METADATA, in which case DB06 might be CVE-2006-2081.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securitytracker.com/id?1016529http://www.kb.cert.org/vuls/id/932124http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.htmlhttp://www.securityfocus.com/archive/1/440758/100/100/threadedhttp://www.securityfocus.com/bid/19054http://www.us-cert.gov/cas/techalerts/TA06-200A.htmlhttp://www.vupen.com/english/advisories/2006/2863http://www.vupen.com/english/advisories/2006/2947https://exchange.xforce.ibmcloud.com/vulnerabilities/27897http://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securitytracker.com/id?1016529http://www.kb.cert.org/vuls/id/932124http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.htmlhttp://www.securityfocus.com/archive/1/440758/100/100/threadedhttp://www.securityfocus.com/bid/19054http://www.us-cert.gov/cas/techalerts/TA06-200A.htmlhttp://www.vupen.com/english/advisories/2006/2863http://www.vupen.com/english/advisories/2006/2947https://exchange.xforce.ibmcloud.com/vulnerabilities/27897
2006-07-21
Published