CVE-2006-3702
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.6%
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 for OCI; (10) DB16 for Query Rewrite/Summary Mgmt; (11) DB17, (12) DB18, (13) DB19, (14) DBC02, (15) DBC03, and (16) DBC04 for RPC; and (17) DB20 for Semantic Analysis. NOTE: as of 20060719, Oracle has not disputed third party claims that DB06 is related to "SQL injection" using DBMS_EXPORT_EXTENSION with a modified ODCIIndexGetMetadata routine and a call to GET_DOMAIN_INDEX_METADATA, in which case DB06 might be CVE-2006-2081.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securitytracker.com/id?1016529https://exchange.xforce.ibmcloud.com/vulnerabilities/27897http://www.kb.cert.org/vuls/id/932124http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.htmlhttp://www.securityfocus.com/archive/1/440758/100/100/threadedhttp://www.securityfocus.com/bid/19054http://www.us-cert.gov/cas/techalerts/TA06-200A.htmlhttp://www.vupen.com/english/advisories/2006/2863