Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle Database Server Vulnerability - CVE-2006-3705 - Vulnerability Database
Oracle Database Server

Oracle Database Server Vulnerability - CVE-2006-3705

Critical
Reference: CVE-2006-3705
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-3705
Title: Oracle Database Server Vulnerability
Overview:

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors aka Oracle Vuln (1) DB21 for Statistics and (2) DB22 for Upgrade amp Downgrade. NOTE: as of 20060719 Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.