CVE-2006-1875 - Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impac

CVE-2006-1875

Summary

Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11. NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS. The most severe of these vulnerabilities could possibly expose affected computers to complete compromise.

References

Vulnerable Configurations

cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 18-10-2018 - 16:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	17590
confirm	http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
hp	HPSBMA02113 SSRT061148
misc	http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html
sectrack	1015961
secunia	19712 19859
vupen	ADV-2006-1397 ADV-2006-1571
xf	oracle-sdolrstrigins-sql-injection(26055)

Last major update

18-10-2018 - 16:37

Published

20-04-2006 - 10:02

Last modified

18-10-2018 - 16:37