CVE-2006-0261
Last modified
CVE-2006-0261 is a vulnerability of currently unknown severity. Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.. EPSS estimates a 5.28% chance of exploitation in the next 30 days.
Description
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 8.1.7.4 |
| Oracle | Database Server | 9.0.1.5 |
| Oracle | Database Server | 9.2.0.7 |
| Oracle | Database Server | 10.1.0.5 |
References
- http://secunia.com/advisories/18493Vendor Advisory
- http://secunia.com/advisories/18608Vendor Advisory
- http://www.kb.cert.org/vuls/id/545804US Government Resource
- http://www.vupen.com/english/advisories/2006/0243Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0323Vendor Advisory
- http://secunia.com/advisories/18493Vendor Advisory
- http://secunia.com/advisories/18608Vendor Advisory
- http://www.kb.cert.org/vuls/id/545804US Government Resource
- http://www.vupen.com/english/advisories/2006/0243Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0323Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-0261?
How severe is CVE-2006-0261?
How do I fix CVE-2006-0261?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-0255Unquoted Windows search path vulnerability in Check Point VP…
- CVE-2006-0256Unspecified vulnerability in the Advanced Queuing component …
- CVE-2006-0257Unspecified vulnerability in the Change Data Capture compone…
- CVE-2006-0258Unspecified vulnerability in the Connection Manager componen…
- CVE-2006-0259Multiple unspecified vulnerabilities in Oracle Database serv…
- CVE-2006-0260Multiple unspecified vulnerabilities in Oracle Database serv…
- CVE-2006-0262Unspecified vulnerability in the Net Foundation Layer compon…
- CVE-2006-0263Multiple unspecified vulnerabilities in Oracle Database serv…
- CVE-2006-0264Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-0265Multiple unspecified vulnerabilities in Oracle Database serv…
- CVE-2006-0266Unspecified vulnerability in the Query Optimizer component o…
- CVE-2006-0267Unspecified vulnerability in the Query Optimizer component o…
Are you affected by CVE-2006-0261?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
