PT-2006-1611 · Oracle · Oracle Database

Published 2006-02-04 · Updated 2017-07-20 · CVE-2006-0547

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Database versions 8i, 9i, and 10g

Description The issue allows remote authenticated users to execute arbitrary SQL statements in the context of the SYS user, bypassing audit logging. This can include creating new privileged database accounts. The vulnerability is exploited via a modified AUTH ALTER SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol.

Recommendations For Oracle Database versions 8i, 9i, and 10g, consider restricting access to the SYS user and limiting the execution of arbitrary SQL statements until a fix is available. As a temporary workaround, consider disabling the modification of the AUTH ALTER SESSION attribute in the TNS protocol to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0547

Affected Products

Oracle Database

References · 10

• http://integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf · Vendor Advisory
• http://oracle.com/technology/deploy/security/pdf/cpujan2006.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0547 · Security Note
• http://imperva.com/application_defense_center/papers/oracle-dbms-01172006.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0547 · Note
• http://red-database-security.com/advisory/oracle_cpu_jan_2006.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24184 · Note
• http://kb.cert.org/vuls/id/871756 · Note
• http://us-cert.gov/cas/techalerts/TA06-018A.html · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html · Note