CVE-2006-2505

This Perl script exploits CVE-2006-2505 in Oracle databases by leveraging the DBMS_EXPORT_EXTENSION package to grant or revoke DBA privileges to an unprivileged user. It creates a malicious package that executes arbitrary SQL commands when triggered by the vulnerable function.

This exploit leverages a vulnerability in Oracle 10g 10.2.0.2.0 by creating a malicious package that grants DBA privileges to an attacker-controlled user. It uses the DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_METADATA function to trigger the malicious payload.