CVE-2006-3705
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.6%
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.
Produtos afetados
n/a · n/aReferências
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047992.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047993.htmlhttp://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securityreason.com/securityalert/1251http://securitytracker.com/id?1016529https://exchange.xforce.ibmcloud.com/vulnerabilities/27886https://exchange.xforce.ibmcloud.com/vulnerabilities/27887https://exchange.xforce.ibmcloud.com/vulnerabilities/27897http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.red-database-security.com/advisory/oracle_sql_injection_dbms_stats.html