CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0271

Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the DBMS_REGISTRY package in certain parameters to the (1) IS_COMPONENT, (2) GET_COMP_OPTION, (3) DISABLE_DDL_TRIGGERS, (4) SCRIPT_EXISTS, (5) COMP_PATH, (6) GATHER_STATS, (7) NOTHING_SCRIPT, and (8) VALIDATE_COMPONENTS functions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.3%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2006-0271

Oracle » Database Server » Version: 8.1.7.4

cpe:2.3:a:oracle:database_server:8.1.7.4
Oracle » Oracle10g » Version: enterprise_10.1.0.4

cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.4
Oracle » Oracle10g » Version: personal_10.1.0.4

cpe:2.3:a:oracle:oracle10g:personal_10.1.0.4
Oracle » Oracle10g » Version: standard_10.1.0.4

cpe:2.3:a:oracle:oracle10g:standard_10.1.0.4
Oracle » Oracle8i » Version: enterprise_8.1.7.4

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4
Oracle » Oracle8i » Version: standard_8.1.7.4

cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4
Oracle » Oracle9i » Version: enterprise_9.0.1.5

cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5
Oracle » Oracle9i » Version: standard_9.2.0.7

cpe:2.3:a:oracle:oracle9i:standard_9.2.0.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0271

Products

Pricing

Contact Us