QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-5340

Back to search

CVE-2006-5340

Published: Oct 18, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package.

VendorProductVersions

n/a

n/a

affected
n/a

References

20588
vdb-entry
x_refsource_BID
20060726 Bypassing Oracle dbms_assert
mailing-list
x_refsource_BUGTRAQ
HPSBMA02133
vendor-advisory
x_refsource_HP
SSRT061201
vendor-advisory
x_refsource_HP
ADV-2006-4065
vdb-entry
x_refsource_VUPEN
22396
third-party-advisory
x_refsource_SECUNIA
1017077
vdb-entry
x_refsource_SECTRACK
20060726 Re: Bypassing Oracle dbms_assert
mailing-list
x_refsource_BUGTRAQ
TA06-291A
third-party-advisory
x_refsource_CERT
VU#869292
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now