CVE-2006-0261: Critical severity Oracle Database Server vulnerability

Published Jan 18, 2006

Updated

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.

Affected Software

5 affected components

Oracle Database Server=9.0.1.5

Oracle Database Server=8.1.7.4

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.5

Event History

Jan 18, 2006

CVE Published

11:03 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0261?

CVE-2006-0261 is considered a critical vulnerability that may allow unauthorized access or manipulation of the Oracle Database.

What versions of Oracle Database are affected by CVE-2006-0261?

CVE-2006-0261 affects Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5.

How do I fix CVE-2006-0261?

To mitigate CVE-2006-0261, Oracle recommends updating to a patched version of the database server.

What components are involved in CVE-2006-0261?

CVE-2006-0261 specifically involves vulnerabilities in the Dictionary component and the Oracle Label Security component.

Is there any detailed analysis available for CVE-2006-0261?

Oracle has acknowledged the existence of multiple vulnerabilities in CVE-2006-0261 but has disclosed limited details regarding their impacts.