PT-2007-1346 · Oracle · Oracle

Russell Lowenthal · Published 2007-02-27 · Updated 2018-10-16 · CVE-2006-7067

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle versions prior to the fixed version

Description The issue allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-7067

Affected Products

Oracle

References · 7

• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048251.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7067 · Security Note
• http://securityfocus.com/archive/1/441477/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/048292.html · Note
• http://securityfocus.com/archive/1/441345/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7067 · Note
• http://securityreason.com/securityalert/2328 · Note