Lucene search

K
cve[email protected]CVE-2006-7067
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2006-7067

2007-03-0221:18:00
NVD-CWE-Other
web.nvd.nist.gov
19
oracle
10g
r2
remote code execution
cve-2006-7067
security vulnerability

7.4 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

0.048 Low

EPSS

Percentile

92.7%

Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an “alter session set events” command with invalid arguments. NOTE: this issue was originally disputed by a third party, but the dispute was retracted. NOTE: this issue was called an “integer overflow” in the original source, but this might be incorrect.

7.4 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

0.048 Low

EPSS

Percentile

92.7%

Related for CVE-2006-7067