1. CVE-Search
  2. CVE-2006-0435
ID CVE-2006-0435
Summary Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:1.0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:1.0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:1.0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:1.0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:1.0.2.1s_for_apps:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:1.0.2.1s_for_apps:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:1.0.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:1.0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:1.0.2.2_roll_up_2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:1.0.2.2_roll_up_2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.0.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.0.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 19-10-2018 - 15:44)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 16384
bugtraq
  • 20060125 Workaround for unpatched Oracle PLSQL Gateway flaw
  • 20060131 Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • 20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw
  • 20060202 The History of the Oracle PLSQL Gateway Flaw
  • 20060208 Re: Workaround for unpatched Oracle PLSQL Gateway flaw
cert-vn VU#169164
confirm http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
fulldisc
  • 20060125 Workaround for unpatched Oracle PLSQL Gateway flaw
  • 20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw
  • 20060202 The History of the Oracle PLSQL Gateway Flaw
hp
  • HPSBMA02113
  • SSRT061148
misc http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html
osvdb 22719
sectrack
  • 1015544
  • 1015961
secunia
  • 18621
  • 19712
  • 19859
sreason
vupen
  • ADV-2006-0338
  • ADV-2006-1397
  • ADV-2006-1571
xf oracle-plsql-command-execution(24363)
Last major update 19-10-2018 - 15:44
Published 26-01-2006 - 11:07
Last modified 19-10-2018 - 15:44
Back to Top