← back
CVE-2006-2505

CVE-2006-2505

EPSS 2.1%
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/1719unverifiedexploitdbwww.exploit-db.com/exploits/3269unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/19860http://www.kb.cert.org/vuls/id/932124http://www.securityfocus.com/archive/1/432078/100/0/threadedhttp://www.securityfocus.com/archive/1/432354/100/0/threadedhttp://www.securityfocus.com/archive/1/432355/100/0/threadedhttp://www.securityfocus.com/bid/17699