CVE-2006-5345
Last modified
CVE-2006-5345 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.. EPSS estimates a 3.09% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 9.0.1.5 |
| Oracle | Database Server | 9.2.0.7 |
| Oracle | Database Server | 10.1.0.4 |
References
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
- http://secunia.com/advisories/22396Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA06-291A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/4065Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-5345?
How severe is CVE-2006-5345?
How do I fix CVE-2006-5345?
Are you affected by CVE-2006-5345?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST