Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-0551 | First vendor Publication | 2006-02-03 |
| Vendor | Cve | Last vendor Modification | 2017-07-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB05, subsumed by CVE-2006-0260. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0551 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 4 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-12-07 | Name : Oracle Database Server Multiple Unspecified Vulnerabilities File : nvt/gb_oracle_database_mult_unspecified_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 22643 | Oracle Database Data Pump Metadata API DBMS_METADATA Unspecified Procedure SQ... Oracle Database Server contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DBMS_METADATA package not properly sanitizing user-supplied input to unspecified procedures. This may allow an attacker to inject or manipulate SQL queries in the back-end database. |
| 22637 | Oracle Database Data Pump Metadata API DBMS_METADATA_INT Multiple Procedure S... Oracle Database Server contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DBMS_METADATA_INT package not properly sanitizing user-supplied input to the MAKE_FILTER, FETCH_VIEWS_ERROR, FETCH_FILTERS, FETCH_VIEWS, SET_FILTER_COMMON, DO_FILTER_SCRIPT, SET_TABLE_FILTERS, or MAKE_FILTER_TEXT procedure. This may allow an attacker to inject or manipulate SQL queries in the back-end database. |
| 22544 | Oracle Database Data Pump Metadata API DBMS_DATAPUMP Multiple Procedure SQL I... Oracle Database Server contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DBMS_DATAPUMP package not properly sanitizing user-supplied input to the GENERATE_JOB_NAME, GET_WORKERSTATUSLIST1010, GET_PARAMVALUES1010, GET_DUMPFILESET1010, GET_JOBSTATUS1010, ATTACH, and ESTABLISH_REMOTE_CONTEXT procedures. This may allow an attacker to inject or manipulate SQL queries in the back-end database. |
| 22543 | Oracle Database Data Pump Metadata API DBMS_METADATA_UTIL Multiple Procedure ... Oracle Database Server contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the DBMS_METADATA_UTIL package not properly sanitizing user-supplied input to the LONG2VARCHAR, LONG2VCMAX, LONG2VCNT, or LONG2CLOB variables. This may allow an attacker to inject or manipulate SQL queries in the back-end database. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2011-11-16 | Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_jan_2006.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:03:40 |
|
| 2021-04-22 01:04:12 |
|
| 2020-05-23 00:17:23 |
|
| 2017-07-20 09:23:20 |
|
| 2014-02-17 10:34:35 |
|
| 2013-05-11 10:48:50 |
|
