| ID |
CVE-2006-0257
|
| Summary |
Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:9.2.0.7:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
-
cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 10.0 (as of 20-07-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| refmap
via4
|
|
| saint
via4
|
| bid | 16287 | | description | Oracle XML Component DBMS_XMLSCHEMA.GENERATESCHEMA buffer overflow | | id | database_oracle_version | | osvdb | 22567 | | title | oracle_xml_generateschema | | type | remote |
|
| Last major update |
20-07-2017 - 01:29 |
| Published |
18-01-2006 - 11:03 |
| Last modified |
20-07-2017 - 01:29 |
