CVE-2006-0259: SQL Injection
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component; (3) DB10 in the (b) Net Listener component; and (4) DB16 in the (c) Oracle Text component. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that DB06 is SQL injection in the GENERATEJOBNAME, GETWORKERSTATUSLIST1010, GETPARAMVALUES1010, GETDUMPFILESET1010, GETJOBSTATUS1010, ATTACH, and ESTABLISHREMOTECONTEXT functions in DBMSDATAPUMP.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0259?
The severity of CVE-2006-0259 is currently unspecified, as it includes multiple vulnerabilities in Oracle Database server 10.1.0.5.
How do I fix CVE-2006-0259?
To fix CVE-2006-0259, it is recommended to apply the latest patches provided by Oracle for the affected version 10.1.0.5.
What components are affected by CVE-2006-0259?
CVE-2006-0259 affects multiple components including Data Pump, Net Listener, and Oracle Text in Oracle Database server 10.1.0.5.
Can CVE-2006-0259 be exploited remotely?
The attack vectors for CVE-2006-0259 are unspecified, but vulnerabilities in database components typically can lead to remote exploitation.
Is CVE-2006-0259 a known vulnerability?
Yes, CVE-2006-0259 is a known vulnerability identified in Oracle Database server 10.1.0.5, associated with multiple unspecified impacts.