Security Advisory

CVE-2006-5333

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-10-18 01:00:00
Last updated 2024-08-07 19:48:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.