CVE-2006-5333
published 2006-10-18CVE-2006-5333: Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create…
high7.1CVSS 3.1
AVNACHAuSCCICAC
Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/22396http://securitytracker.com/id?1017077http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdfhttp://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_oct_2006.htmlhttp://www.securityfocus.com/archive/1/449110/100/0/threadedhttp://www.securityfocus.com/archive/1/449711/100/0/threadedhttp://www.securityfocus.com/bid/20588http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlhttp://www.vupen.com/english/advisories/2006/4065http://secunia.com/advisories/22396http://securitytracker.com/id?1017077http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdfhttp://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_oct_2006.htmlhttp://www.securityfocus.com/archive/1/449110/100/0/threadedhttp://www.securityfocus.com/archive/1/449711/100/0/threadedhttp://www.securityfocus.com/bid/20588http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlhttp://www.vupen.com/english/advisories/2006/4065
2006-10-18
Published