Get started for free to scan for vulnerabilites.
Download Mageni to scan for vulnerabilities. It is free to get started and can be installed in Windows, macOS and Linux.
CVE-2006-0265
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB17 in the Oracle Text component and (2) DB18 in the Program Interface Network component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB17 involves SQL injection in the (a) VALIDATE_STATEMENT and BUILD_DML functions in CTXSYS.DRILOAD; (b) CLEAN_DML function in CTXSYS.DRIDML; (c) GET_ROWID function in CTXSYS.CTX_DOC; (d) BROWSE_WORDS function in CTXSYS.CTX_QUERY; and (e) ODCIINDEXTRUNCATE, ODCIINDEXDROP, and ODCIINDEXDELETE functions in CATINDEXMETHODS..
CVSSv2.0 Score
- Severity
- High
- Base Score
- 10/10
- Exploit Score
- 10/10
- Access Vector
- Network
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 10/10
- Confidentiality Impact
- Complete
- Availability Impact
- Complete
- Integrity Impact
- Complete
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://www.securityfocus.com/bid/16287
- http://www.kb.cert.org/vuls/id/545804
- http://secunia.com/advisories/18493
- http://secunia.com/advisories/18608
- http://securitytracker.com/id?1015499
- http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
- http://www.osvdb.org/22555
- http://www.osvdb.org/22639
- http://www.osvdb.org/22640
- http://www.osvdb.org/22641
- http://www.osvdb.org/22642
- http://www.vupen.com/english/advisories/2006/0243
- http://www.vupen.com/english/advisories/2006/0323
- http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
Know your vulnerabilities for free. Start using Mageni today.
Mageni can help you to find, assess and manage your vulnerabilities.
Get Started for Free