CVE-2006-5334
Last modified
CVE-2006-5334 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.. EPSS estimates a 3.07% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATE_FIXED and (c) TESSELATE function.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 9.0.1.5 |
| Oracle | Database Server | 9.2.0.7 |
| Oracle | Database Server | 10.1.0.5 |
References
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5334?
How severe is CVE-2006-5334?
How do I fix CVE-2006-5334?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-5328OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.…
- CVE-2006-5329Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2006-5330CRLF injection vulnerability in Adobe Flash Player plugin 9.…
- CVE-2006-5331The altivec_unavailable_exception function in arch/powerpc/k…
- CVE-2006-5332Unspecified vulnerability in xdb.dbms_xdbz in the XMLDB comp…
- CVE-2006-5333Unspecified vulnerability in Oracle Spatial component in Ora…
- CVE-2006-5335Multiple unspecified vulnerabilities in Oracle Database 10.1…
- CVE-2006-5336Multiple unspecified vulnerabilities in the Change Data Capt…
- CVE-2006-5337Unspecified vulnerability in the Core RDBMS component in Ora…
- CVE-2006-5338Unspecified vulnerability in the Core RDBMS component in Ora…
- CVE-2006-5339Unspecified vulnerability in Oracle Spatial component in Ora…
- CVE-2006-5340Multiple unspecified vulnerabilities in Oracle Spatial compo…
Are you affected by CVE-2006-5334?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
