Oracle Database Server Vulnerability - CVE-2006-5336 - Vulnerability Database

Oracle Database Server Vulnerability - CVE-2006-5336

Critical

Reference: CVE-2006-5336

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-5336

Title: Oracle Database Server Vulnerability

Overview:

Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7 10.1.0.5 and have unknown impact and remote authenticated attack vectors related to (1) sys.dbms_cdc_ipublish (Vuln DB05) and (2) sys.dbms_cdc_isubscribe (DB06). NOTE: as of 20061023 Oracle has not disputed reports from reliable third parties that DB05 is for SQL injection in CREATE_CHANGE_TABLE and CHANGE_TABLE_TRIGGER and DB06 is for PL/SQL injection in the PREPARE_UNBOUNDED_VIEW procedure.