Oracle Database Server Vulnerability - CVE-2006-0257 - Vulnerability Database

Oracle Database Server Vulnerability - CVE-2006-0257

Critical

Reference: CVE-2006-0257

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-0257

Title: Oracle Database Server Vulnerability

Overview:

Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors as identified by Oracle Vuln DB02. NOTE: details are unavailable from Oracle but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package.