CVE-2006-1870: Critical severity Oracle Database Server vulnerability

Published Apr 20, 2006

Updated

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln# DB05. NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is the same issue as CVE-2006-2081.

Affected Software

5 affected components

Oracle Database Server=8.1.7.4

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.2

Remediation

Patch Available

http://securitytracker.com/id?1015961

Event History

Apr 20, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1870?

The severity of CVE-2006-1870 is currently undetermined due to a lack of available details from Oracle.

How do I fix CVE-2006-1870?

Fixing CVE-2006-1870 may involve applying patches or updates provided by Oracle for affected database versions.

Which versions of Oracle Database are affected by CVE-2006-1870?

CVE-2006-1870 affects Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2.

What component of Oracle Database is vulnerable in CVE-2006-1870?

The vulnerability in CVE-2006-1870 is located in the Export component of Oracle Database.

Is there a public statement from Oracle regarding CVE-2006-1870?

As of the last update, Oracle has not publicly commented on CVE-2006-1870 or its details.