CVE-2006-5334: Buffer Overflow

Published Oct 18, 2006

Updated

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authenticated attack vectors related to mdsys.md2, aka Vuln# DB03. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB03 is related to one or more of (1) a buffer overflow in the (a) RELATE function or (2) SQL injection in the (b) TESSELATEFIXED and (c) TESSELATE function.

Affected Software

3 affected components

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.5

Remediation

Patch Available

http://www.securityfocus.com/bid/20588

Event History

Oct 18, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5334?

The severity of CVE-2006-5334 is not explicitly defined, but it is associated with critical vulnerabilities in Oracle Database versions.

How do I fix CVE-2006-5334?

To fix CVE-2006-5334, users should apply the latest security patches released by Oracle for affected database versions.

Which versions are affected by CVE-2006-5334?

CVE-2006-5334 affects Oracle Database versions 9.0.1.5, 9.2.0.7, and 10.1.0.5.

What are the attack vectors for CVE-2006-5334?

CVE-2006-5334 has remote authenticated attack vectors, which may allow exploitation by authenticated users.

What components are impacted by CVE-2006-5334?

CVE-2006-5334 specifically impacts the Oracle Spatial component related to mdsys.md2.