Home Corporate Website Jobs  Mailing Lists RSS Blog  Online Shop Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0) Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2006-5340 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2006-5340 Description: Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package. CVE Status: Candidate References: ST   1017077 SAID   Secunia Advisory: SA22396 MISC   http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html   http://www.red-database-security.com/wp/bypass_dbms_assert.pdf   http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf HP   http://www.securityfocus.com/archive/1/archive/1/449711/100/0/threaded CONFIRM   http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html CERT-VN   869292 CERT   http://www.us-cert.gov/cas/techalerts/TA06-291A.html BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/449512/100/0/threaded   http://www.securityfocus.com/archive/1/archive/1/449110/100/0/threaded   http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html   http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html BID   20588 Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. HP OpenView Select Identity Connectors Information Disclosure 2. rPath update for libtiff 3. Cisco ASA and PIX Security Appliances Multiple Vulnerabilities 4. Gentoo update for realplayer 5. Gentoo update for yelp 6. Gentoo update for dnsmasq 7. Gentoo update for mysql 8. Cisco Secure ACS EAP Packet Denial of Service 9. SUSE update for IBMJava5-JRE and java-1_5_0-ibm 10. IBM AIX "swcons" Command Privilege Escalation Vulnerability
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia