PT-2006-6055 · Oracle · Oracle Database

Alexander Kornbrust + 1 · Published 2006-10-18 · Updated 2018-10-17 · CVE-2006-5335

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Database versions 10.1.0.5 through 10.2.0.2

Description The issue involves multiple unspecified vulnerabilities with remote authenticated attack vectors. These vulnerabilities are related to the Change Data Capture (CDC) and Oracle Spatial components. Specifically, they involve sys.dbms cdc impdp, sys.dbms cdc isubscribe, and mdsys.sdo geor int. Reports from reliable third parties suggest that these issues may be related to SQL injection in certain functions.

Recommendations For Oracle Database versions 10.1.0.5 through 10.2.0.2, consider restricting access to the vulnerable components, such as the Change Data Capture (CDC) and Oracle Spatial components, until a fix is available. As a temporary workaround, consider disabling the use of the BUMP SEQUENCE, CREATE SUBSCRIPTION, EXTEND WINDOW LIST, SUBSCRIBE, and COMPRESSDATA functions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-5335

Affected Products

Oracle Database

References · 14

• http://vupen.com/english/advisories/2006/4065 · Vendor Advisory
• http://secunia.com/advisories/22396 · Vendor Advisory
• http://securityfocus.com/archive/1/449711/100/0/threaded · Vendor Advisory
• http://securityfocus.com/bid/20588 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5335 · Security Note
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Note
• http://securityfocus.com/archive/1/449110/100/0/threaded · Note
• http://securitytracker.com/id?1017077 · Note
• http://kb.cert.org/vuls/id/736324 · Note
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Note
• http://databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf · Note
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Note
• http://securityfocus.com/archive/1/449511/100/100/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5335 · Note