CVE-2006-5338
Last modified
CVE-2006-5338 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER. EPSS estimates a 2.53% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER. NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 10.1.0.5 |
| Oracle | Database Server | 10.2.0.0 |
References
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5338?
How severe is CVE-2006-5338?
How do I fix CVE-2006-5338?
Are you affected by CVE-2006-5338?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST