Oracle PL/SQL Gateway fails to properly validate HTTP requests

🗓️ 27 Jan 2006 00:00:00Reported by CERTType

Oracle PL/SQL Gateway fails to properly validate HTTP requests, allowing remote attackers to execute SQL commands with elevated privileges. Apply a patch, set configuration parameters, and limit access to HTTP Server

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2006-0435	26 Jan 200611:00	–	cve
Cvelist	CVE-2006-0435	26 Jan 200611:00	–	cvelist
EUVD	EUVD-2006-0442	7 Oct 202500:30	–	euvd
NVD	CVE-2006-0435	26 Jan 200611:07	–	nvd
OpenVAS	Oracle Application Server Unspecified Vulnerability (cpuapr2006)	7 Dec 201100:00	–	openvas
OpenVAS	Oracle Database Server Multiple Unspecified Vulnerabilities	7 Dec 201100:00	–	openvas
Tenable Nessus	Oracle Application Server Multiple Vulnerabilities	24 Jan 201200:00	–	nessus
Tenable Nessus	Oracle Database Multiple Vulnerabilities (January 2006 CPU)	16 Nov 201100:00	–	nessus
Prion	Design/Logic Flaw	26 Jan 200611:07	–	prion

Source	Link
oracle	www.oracle.com/technology/deploy/security/pdf/cpuapr2006.html
metalink	www.metalink.oracle.com/
secunia	www.secunia.com/advisories/18621/
securityfocus	www.securityfocus.com/archive/1/423029
securityfocus	www.securityfocus.com/archive/1/archive/1/423819/100/0/threaded
lists	www.lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html
red-database-security	www.red-database-security.com/advisory/oracle_modplsql_injection.html
integrigy	www.integrigy.com/info/IntegrigySecurityAnalysis-MODPLSQLVuln.pdf
red-database-security	www.red-database-security.com/advisory/oracle_cpu_apr_2006.html

19 Apr 2006 15:20Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

EPSS0.03153