ByteOS Network

NVD Vulnerability Details :

CVE-2006-5340

Modified

Source-cve@mitre.org

Published At-18 Oct, 2006 | 01:07

Updated At-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.1	HIGH	AV:N/AC:H/Au:S/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 7.1

Base severity: HIGH

Vector:

AV:N/AC:H/Au:S/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html	cve@mitre.org	N/A
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html	cve@mitre.org	N/A
http://secunia.com/advisories/22396	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1017077	cve@mitre.org	N/A
http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf	cve@mitre.org	N/A
http://www.kb.cert.org/vuls/id/869292	cve@mitre.org	US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html	cve@mitre.org	N/A
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html	cve@mitre.org	N/A
http://www.red-database-security.com/wp/bypass_dbms_assert.pdf	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/449110/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/449512/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/449711/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/20588	cve@mitre.org	Patch
http://www.us-cert.gov/cas/techalerts/TA06-291A.html	cve@mitre.org	US Government Resource
http://www.vupen.com/english/advisories/2006/4065	cve@mitre.org	Vendor Advisory
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00489.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2006/07/msg00500.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/22396	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1017077	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/869292	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.red-database-security.com/wp/bypass_dbms_assert.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/449110/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/449512/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/449711/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/20588	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.us-cert.gov/cas/techalerts/TA06-291A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2006/4065	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory