Lucene search

[email protected]CVE-2006-0435

HistoryJan 26, 2006 - 11:07 a.m.

CVE-2006-0435

2006-01-2611:07:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

oracle

pl/sql

vulnerability

database server

application server

cve-2006-0435

nvd

6.2 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

JSON

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.

CPENameOperatorVersion
oracle:http_serveroracle http servereq9.0.3.1
oracle:application_serveroracle application servereq10.1.2.0.2
oracle:http_serveroracle http servereq9.0.1
oracle:application_serveroracle application servereq9.0.2.1
oracle:application_serveroracle application servereq*
oracle:application_serveroracle application servereq10.1.2.1.0
oracle:http_serveroracle http servereq1.0.2.2
oracle:http_serveroracle http servereq9.1
oracle:application_serveroracle application servereq9.0.2.0.0
oracle:application_serveroracle application servereq1.0.2.0

CPE	Name	Operator	Version
oracle:http_server	oracle http server	eq	9.0.3.1
oracle:application_server	oracle application server	eq	10.1.2.0.2
oracle:http_server	oracle http server	eq	9.0.1
oracle:application_server	oracle application server	eq	9.0.2.1
oracle:application_server	oracle application server	eq	*
oracle:application_server	oracle application server	eq	10.1.2.1.0
oracle:http_server	oracle http server	eq	1.0.2.2
oracle:http_server	oracle http server	eq	9.1
oracle:application_server	oracle application server	eq	9.0.2.0.0
oracle:application_server	oracle application server	eq	1.0.2.0

Rows per page:

1-10 of 401

References

lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html

lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html

lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html

secunia.com/advisories/18621

secunia.com/advisories/19712

secunia.com/advisories/19859

securityreason.com/securityalert/402

securityreason.com/securityalert/403

securitytracker.com/id?1015544

securitytracker.com/id?1015961

www.kb.cert.org/vuls/id/169164

www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html

www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html

www.osvdb.org/22719

www.securityfocus.com/archive/1/423029/100/0/threaded

www.securityfocus.com/archive/1/423673/100/0/threaded

www.securityfocus.com/archive/1/423819/100/0/threaded

www.securityfocus.com/archive/1/423822/100/0/threaded

www.securityfocus.com/archive/1/424394/100/0/threaded

www.securityfocus.com/archive/1/432267/100/0/threaded

www.securityfocus.com/bid/16384

www.vupen.com/english/advisories/2006/0338

www.vupen.com/english/advisories/2006/1397

www.vupen.com/english/advisories/2006/1571

exchange.xforce.ibmcloud.com/vulnerabilities/24363

6.2 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

JSON

Related for CVE-2006-0435

openvas1 prion1 cvelist1 cert1 nessus2