CVE-2006-1705: Low severity Oracle Oracle10g vulnerability
Published Apr 11, 2006
·Updated
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view.
Affected Software
38 affected components
Oracle Oracle10g=enterprise_10.1.0.2
Oracle Oracle10g=enterprise_10.1.0.3
Oracle Oracle10g=enterprise_10.1.0.3.1
Oracle Oracle10g=enterprise_10.1.0.4
Oracle Oracle10g=enterprise_10.2.3
Oracle Oracle10g=personal_10.1.0.2
Oracle Oracle10g=personal_10.1.0.3
Oracle Oracle10g=personal_10.1.0.3.1
Oracle Oracle10g=personal_10.1.0.4
Oracle Oracle10g=personal_10.2.3
Oracle Oracle10g=standard_10.1.0.2
Oracle Oracle10g=standard_10.1.0.3
Oracle Oracle10g=standard_10.1.0.3.1
Oracle Oracle10g=standard_10.1.0.4
Oracle Oracle10g=standard_10.1.0.4.2
Oracle Oracle10g=standard_10.1.0.5
Oracle Oracle10g=standard_10.2.0.1
Oracle Oracle10g=standard_10.2.3
Oracle Oracle9i=enterprise_9.2.0
Oracle Oracle9i=enterprise_9.2.0.1
Oracle Oracle9i=enterprise_9.2.0.2
Oracle Oracle9i=enterprise_9.2.0.3
Oracle Oracle9i=enterprise_9.2.0.5
Oracle Oracle9i=enterprise_9.2.0.6
Oracle Oracle9i=personal_9.2
Oracle Oracle9i=personal_9.2.0.1
Oracle Oracle9i=personal_9.2.0.2
Oracle Oracle9i=personal_9.2.0.3
Oracle Oracle9i=personal_9.2.0.5
Oracle Oracle9i=personal_9.2.0.6
Oracle Oracle9i=standard_9.2
Oracle Oracle9i=standard_9.2.0.1
Oracle Oracle9i=standard_9.2.0.2
Oracle Oracle9i=standard_9.2.0.3
Oracle Oracle9i=standard_9.2.0.5
Oracle Oracle9i=standard_9.2.0.6
Oracle Oracle9i=standard_9.2.0.7
Oracle Oracle9i=standard_9.2.3
Event History
Apr 11, 2006
CVE Published
10:02 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1705?
CVE-2006-1705 is considered a high severity vulnerability due to its potential to allow unauthorized modification of data.
2
How do I fix CVE-2006-1705?
To fix CVE-2006-1705, database administrators should apply the latest patches released by Oracle for affected versions.
3
Which Oracle Database versions are affected by CVE-2006-1705?
CVE-2006-1705 affects Oracle Database versions 9.2.0.0 to 10.2.0.3.
4
What types of operations can be performed through the crafted view in CVE-2006-1705?
Attackers can perform insert, update, or delete operations on the base table through a crafted view with 'SELECT' privileges.
5
Who can exploit CVE-2006-1705?
Local users with 'SELECT' privileges on a base table can exploit CVE-2006-1705 to modify data unauthorizedly.