CVE Database
/

CVE-2006-5336

Back to search

CVE-2006-5336

Published: Oct 18, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack vectors related to (1) sys.dbms_cdc_ipublish (Vuln# DB05) and (2) sys.dbms_cdc_isubscribe (DB06). NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB05 is for SQL injection in CREATE_CHANGE_TABLE and CHANGE_TABLE_TRIGGER, and DB06 is for PL/SQL injection in the PREPARE_UNBOUNDED_VIEW procedure.

VendorProductVersions

n/a

n/a

affected
n/a

References

20588
vdb-entry
x_refsource_BID
HPSBMA02133
vendor-advisory
x_refsource_HP
SSRT061201
vendor-advisory
x_refsource_HP
ADV-2006-4065
vdb-entry
x_refsource_VUPEN
22396
third-party-advisory
x_refsource_SECUNIA
VU#716964
third-party-advisory
x_refsource_CERT-VN
1017077
vdb-entry
x_refsource_SECTRACK
VU#446100
third-party-advisory
x_refsource_CERT-VN
TA06-291A
third-party-advisory
x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now