PT-2006-1338 · Oracle · Oracle Database Server

Alexander Kornbrust · Published 2006-01-18 · Updated 2017-07-20 · CVE-2006-0263

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database server versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1

Description The issue affects the Net Listener and Network Communications (RPC) components of the Oracle Database server. It involves unspecified vulnerabilities with unspecified impact and attack vectors.

Recommendations For Oracle Database server version 8.1.7.4, update to a version that addresses the issue. For Oracle Database server version 9.0.1.5, update to a version that addresses the issue. For Oracle Database server version 9.0.1.5 FIPS, update to a version that addresses the issue. For Oracle Database server version 9.2.0.7, update to a version that addresses the issue. For Oracle Database server version 10.1.0.5, update to a version that addresses the issue. For Oracle Database server version 10.2.0.1, update to a version that addresses the issue.

Fix

Related Identifiers

CVE-2006-0263

Affected Products

Oracle Database Server

References · 16

• http://secunia.com/advisories/18493 · Vendor Advisory
• http://secunia.com/advisories/18608 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0263 · Security Note
• http://securityfocus.com/bid/16287 · Note
• http://oracle.com/technetwork/topics/security/cpujan2006-082403.html · Note
• http://kb.cert.org/vuls/id/870172 · Note
• http://vupen.com/english/advisories/2006/0243 · Note
• http://osvdb.org/22551 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0263 · Note
• http://vupen.com/english/advisories/2006/0323 · Note
• http://osvdb.org/22547 · Note
• http://osvdb.org/22550 · Note
• http://us-cert.gov/cas/techalerts/TA06-018A.html · Note
• http://securitytracker.com/id?1015499 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 · Note