CVE-2006-1868

Oracle Database Server 10.1.0.4 - Authenticated Buffer Overflow via DBMS_SNAPSHOT_UTL VERIFY_LOG Procedure

Title source: llm

Description

Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via the VERIFY_LOG procedure of the DBMS_SNAPSHOT_UTL package, aka Vuln# DB03.

References (14)

Core 14

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19712

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19859

Patch, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/797465

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1571

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17590

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://www.securityfocus.com/archive/1/432267/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/26049

Vendor Advisory x_refsource_misc

http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/431588/100/0/threaded

US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA06-109A.html

Vendor Advisory x_refsource_misc

http://www.argeniss.com/research/ARGENISS-ADV-040603.txt

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1397

Patch vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015961

Scores

EPSS 0.1206

EPSS Percentile 95.7%

Details

CWE

CWE-119

Status published

Products (1)

oracle/database_server 10.1.0.4

Published Apr 20, 2006

Tracked Since Feb 18, 2026