CVE-2006-5334Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Database Server

3 documents3 sources
Severity
7.1HIGHNVD
EPSS
6.1%
top 9.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 18
Latest updateMay 1

Description

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

NVDoracle/database_server10.1.0.5, 9.0.1.5, 9.2.0.7+2

Patches

🔴Vulnerability Details

2
GHSA
GHSA-7438-2qhm-wmfv: Unspecified vulnerability in Oracle Spatial component in Oracle Database 92022-05-01
CVEList
CVE-2006-5334: Unspecified vulnerability in Oracle Spatial component in Oracle Database 92006-10-18
CVE-2006-5334 — Oracle Database Server vulnerability | cvebase