PT-2006-4568 · Oracle · Intermedia For Oracle Database+1

Published 2006-07-19 · Updated 2018-10-18 · CVE-2006-3703

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions InterMedia for Oracle Database versions 9.0.1.5 through 10.1.0.4

Description The issue allows remote attackers to bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive data. The impact and attack vectors of this issue are not fully specified.

Recommendations For InterMedia for Oracle Database versions 9.0.1.5 through 10.1.0.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3703

Affected Products

Intermedia For Oracle Database

Oracle Database

References · 13

• http://red-database-security.com/advisory/oracle_cpu_july_2006.html · Vendor Advisory
• http://securityfocus.com/bid/19054 · Patch
• http://secunia.com/advisories/21111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3703 · Security Note
• http://securityfocus.com/archive/1/440758/100/100/threaded · Vendor Advisory
• http://secunia.com/advisories/21165 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27897 · Note
• http://oracle.com/technetwork/topics/security/cpujul2006-101315.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3703 · Note
• http://vupen.com/english/advisories/2006/2947 · Note
• http://vupen.com/english/advisories/2006/2863 · Note
• http://securitytracker.com/id?1016529 · Note
• http://us-cert.gov/cas/techalerts/TA06-200A.html · Note