Multiple vulnerabilities have been reported in various Oracle products. Some have an unknown impact, and others can be exploited to conduct SQL injection attacks or compromise a vulnerable system.

Details have been disclosed for the following vulnerabilities:

1) An input validation error in the Log Miner component ("dbms_logmnr_session" package) can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) A boundary error in the "VERIFY_LOG" procedure (provided by the "sys.dbms_snapshot_utl" package) can be exploited by a malicious user to cause a buffer overflow and execute arbitrary code on the system.

Solution
Apply patches (see vendor advisory).
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Alexander Kornbrust, Red Database Security.
2) Esteban Martinez Fayo, Application Security.

The vendor furthermore credits the following:
* David Litchfield, NGSSoftware.
* noderat ratty

Changelog
Further details available to Secunia VIM customers

Original Advisory
Oracle:
http://www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html

Alexander Kornbrust:
http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_logmnr_session.html
http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html

Argeniss:
http://www.argeniss.com/research/ARGENISS-ADV-040603.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers