Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-2505. PoCs published by bunker, N1V1Hd.
AI-analyzed exploit summary This Perl script exploits CVE-2006-2505 in Oracle databases by leveraging the DBMS_EXPORT_EXTENSION package to grant or revoke DBA privileges to an unprivileged user. It creates a malicious package that executes arbitrary SQL commands when triggered by the vulnerable function.
Description
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package.
Exploits (2)
This Perl script exploits CVE-2006-2505 in Oracle databases by leveraging the DBMS_EXPORT_EXTENSION package to grant or revoke DBA privileges to an unprivileged user. It creates a malicious package that executes arbitrary SQL commands when triggered by the vulnerable function.
This exploit leverages a vulnerability in Oracle 10g 10.2.0.2.0 by creating a malicious package that grants DBA privileges to an attacker-controlled user. It uses the DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_METADATA function to trigger the malicious payload.