Security Advisory

CVE-2006-1874

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-04-20 10:00:00
Last updated 2024-08-07 17:27:29
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB09. NOTE: Oracle has not disputed reliable claims that this issue is SQL injection in MDSYS.PRVT_IDX using the (1) EXECUTE_INSERT, (2) EXECUTE_DELETE, (3) EXECUTE_UPDATE, (4) EXECUTE UPDATE, and (5) CRT_DUMMY functions.