QwikSec

Security Database

CVE

CWE

Training

CVE-2006-5334

Published: Oct 18, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html

x_refsource_MISC

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_HP

http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html

x_refsource_CONFIRM

http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf

x_refsource_MISC

20061018 Analysis of the Oracle October 2006 Critical Patch Update

mailing-list

x_refsource_BUGTRAQ

vendor-advisory

x_refsource_HP

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.