Security Advisory

CVE-2006-5338

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-10-18 01:00:00
Last updated 2024-08-07 19:48:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER. NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL.