CVE-2006-5339: Critical severity Oracle Database Server vulnerability

Published Oct 18, 2006

Updated

Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdogeom, aka Vuln# DB11. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to "length checking" in the RELATE function before MD2.RELATE is called.

Affected Software

4 affected components

Oracle Database Server=8.1.7.4

Oracle Database Server=9.0.1.5

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.4

Remediation

Patch Available

http://www.securityfocus.com/bid/20588

Event History

Oct 18, 2006

CVE Published

01:07 AM

Data Sourced

via NVD·01:07 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5339?

The severity of CVE-2006-5339 is currently unspecified but poses a risk due to its potential remote authenticated attack vectors.

How do I fix CVE-2006-5339?

To fix CVE-2006-5339, ensure that you are using the latest version of Oracle Database and apply any available patches provided by Oracle.

What versions of Oracle Database are affected by CVE-2006-5339?

CVE-2006-5339 affects Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4.

Can CVE-2006-5339 be exploited remotely?

Yes, CVE-2006-5339 can be exploited remotely by authenticated users.

What components of Oracle are impacted by CVE-2006-5339?

CVE-2006-5339 specifically impacts the Oracle Spatial component of Oracle Database.