Secunia Logo
 
CVE Reference: CVE-2006-5339
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-5339

Description:
Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to "length checking" in the RELATE function before MD2.RELATE is called.

CVE Status:
Candidate

References:

ST
  1017077

SAID
  Secunia Advisory: SA22396

MISC
  http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
  http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf

HP
  http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded

CONFIRM
  http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html

CERT
  http://www.us-cert.gov/cas/techalerts/TA06-291A.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded

BID
  20588


Return to the previous page.